Application Security Scan for 192.168.52.147

Meta-data

This report contains the application security scan results for the w3af scan of the 192.168.52.147 which finished 11.03.2018

Configured target URLs

  • http://192.168.52.147/bWAPP/

Enabled plugins

  • audit
    • xpath
    • file_upload
    • xss
    • sqli
    • csrf
    • xst
    • cors_origin
    • generic
    • memcachei
    • format_string
    • blind_sqli
    • htaccess_methods
    • eval
    • os_commanding
    • response_splitting
  • infrastructure
    • server_header
    • php_eggs
    • server_status
  • grep
    • file_upload
    • dom_xss
    • wsdl_greper
    • cross_domain_js
    • html_comments
    • click_jacking
    • hash_analysis
    • code_disclosure
    • analyze_cookies
    • error_500
  • evasion
  • crawl
    • find_backdoors
    • dot_listing
    • sitemap_xml
    • content_negotiation
    • digit_sum
    • wsdl_finder
  • auth
  • bruteforce
  • output
    • csv_file
    • console
    • html_file
  • mangle

Server header

INFO

Summary

The server header for the remote web server is: "Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g". This information was found in the request with id 35.

HTTP proof

GET http://192.168.52.147/bWAPP/ HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 302 Found
content-length: 0
x-powered-by: PHP/5.2.4-2ubuntu5
keep-alive: timeout=15, max=100
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
location: portal.php
date: Sun, 11 Mar 2018 06:47:31 GMT
content-type: text/html

Cross site tracing vulnerability

LOW

Summary

The web server at "http://192.168.52.147/bWAPP/" is vulnerable to Cross Site Tracing. This vulnerability was found in the request with id 36.


Description

The TRACE HTTP method allows a client so send a request to the server, and have the same request then send back in the server's response. This allows the client to determine if the server is receiving the request as expected or if specific parts of the request are not arriving as expected. For example incorrect encoding or a load balancer has filtered or changed a value. On many default installations the TRACE method is still enabled.

While not vulnerable by itself, it does provide a method for cyber-criminals to bypass the HTTPOnly cookie flag, and therefore could allow a XSS attack to successfully access a session token.

The tool has discovered that the affected page permits the HTTP TRACE method.

Fix

The HTTP TRACE method is normally not required within production sites and should therefore be disabled.

Depending on the function being performed by the web application, the risk level can start low and increase as more functionality is implemented.

The remediation is typically a very simple configuration change and in most cases will not have any negative impact on the server or application.

References

HTTP proof

TRACE http://192.168.52.147/bWAPP/ HTTP/1.1
Content-length: 0
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
Host: 192.168.52.147
Content-type: application/x-www-form-urlencoded
Fakeheader: XST
HTTP/1.1 200 OK
transfer-encoding: chunked
keep-alive: timeout=15, max=80
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:35 GMT
content-type: message/http

TRACE /bWAPP/ HTTP/1.1
Connection: keep-alive
Content-length: 0
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
Host: 192.168.52.147
Content-type: application/x-www-form-urlencoded
Fakeheader: XST

PHP Egg

INFO

Summary

The PHP framework running on the remote server has a "Zend Logo" easter egg, access to the PHP egg is possible through the URL: "http://192.168.52.147/bWAPP/?=PHPE9568F35-D428-11d2-A769-00AA001ACF42". This information was found in the request with id 38.

HTTP proof

GET http://192.168.52.147/bWAPP/?=PHPE9568F35-D428-11d2-A769-00AA001ACF42 HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 200 OK
content-length: 2146
x-powered-by: PHP/5.2.4-2ubuntu5
keep-alive: timeout=15, max=99
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:35 GMT
content-type: image/gif

GIF89aqHŐ

	.D^'
+:	*&iŤCm
$;
-	)#` WŽO‚Fr6WM|
*"X
&)7Pi-?Q159	*UŠ!\•Iu
- YŽT†Hs*C>c 3!	)#%3:?122˙f˙˙˙ĚĚĚÇÇÇżżżŤŤŤ’’’sssUUU<<<777&&&,qH˙Ŕ™pH,Č¤ryü1ŸĐ¨”řŤ:§ŇŤĐŞĹzżFmŒěŠÉčďyfÝşŮŰŤS.nĎë´ž|‡ťĺ€pylv„{‰MvxˆsmuU~““€cŠ‰ck’’”…Ÿ}ˆ˜Ł—‡yT\ŠoŁŻ°S—ą´ľĄś¸šşťź˝C68:85žĹX79<?+8ĆĐJŔ:?##/ŃŢC5ÉË"Úç%?6ßŢ<ŘçńçÎLÁ7ě°?'ňü#(:Kr(đă>L<ô“7ĄĘ9†Éńc‚ż‚á0°0‰&0XQĆ3Šľ54˜1ć:.<ÂJĘs+[ępSf?˙&zâü‘C'™/Dř\ş°aQŁXlź0P‚ŠU†DĄJą ‰Ť`‡>Őş„Ť×°hG4źG6	ŇłiĂŚcŰÖĆ:"0|Ő&ŁŻßż2„Ř‹ś„ÄúÚ%FĆƍǐßýrŁ
aŔ~d;°
ĺҒ0€XHß9&oĹŁľë×:tDd<†ˆP¨˘0^_R¨PŃ׀'_%Q ´iąé>öşşőŃąTŒGa‚rm!L0˜°Ŕo‡ŢÓ6§=Łoö'7ŽËŻţJĺ˜>I„<˘/ƒ„ŕ›_‚‘ĐY(tÓ:H‡D|ÖĹ&ĄóIČŢĄŐן%Ç˙`tćß	ü â
J#߄ŽKLŔ€BX~Ą Bz|ÉpĂ}6A_Wă	~éŔ}Ąč ]ϸČb‹JĹv`ů €ňHH!ô•zĺÉŕi<4Řƒâ`ÂNJ˜Ă
ÄĐŔZ”ąŮS•2pˆÜ^"؟Ăeă%q2ŔœîĽHIJ¸äuB‘áU5ŢH˜ˆ*˜ ŕo*
(ĄeŢ`C_=(:
7pÝeâ@ƒ6@*ĺ2âů_€îŚqÂiúg żZč
;ů‚¨8 ĆĂ
ÖĄƒő!}ąľ•L‰č&„	Ř	]~ęi "^Ё˜p˙(TP°šĂ…DČú"|wfŤmqŽîo q:n§&üŐŔÁH Á€Ŕ€Ży Bećđ*5ŘŤƒjIŕ XÝŮŘăČžę'Ňp$žŻţš i	ěX)SđAĂ 8ě€k$Đ@
)ĄąľJTśÂU-ľď†ěĽ—_éÇßR(	'8\w=`‡Ý€@ď/;X45ㄶĐҀ˛LŁ.‡ĐőÝ\6Ř	˜Đ0@HíĹ4˜ĐŃoÁĚďfh-`€	ŕ-ů×a3đ
˜P8ĐŐ&ÇľőÖĎo`‚’Hr‡EÂ
&@‚äxGđľ‘Cđ˙€,¤B´	Ł8p¸¸ňčwŕÔ8˜_üXx˙%ŘÍD ŔÔ@ƒĆ:\Feß}Ź<ÚŚü•ˆ)ű@ůÉuÝYʗƒpű	ÓÂ6ĄÚXԀí€Ď#¤}ANÎ¤őE"ř_
†DôeGaMíFđřn:P
?0%7/Š€V
˜„Ś$p„S€(4Ďt[ăÚÚD42ŕ _ä“Ż†ÓAâ
ŠtŢůM
&4 /`[Sŕ€>Ĺ°k ŕŢŮŔđ‚m…[ňŸ?%°?@Dl€č%’QDĐŁH§Ř€UÉB͛nŕ=%Ü˙?âëׇÂ,Nů=VűA$Đ4ąˆedaĂĹŤ4ÚÍu3lŁŠ„Ť6vŽŽE0Křŕ˘-’Ť3 ÝiFRZí[ƒ‰¤%‰PIîÝV]	_ň´e€.
ě”~ąF™DE&˙*"h" Jj	cő3ć“~7ƒIJ#á™4ƒR7đTk<ę” n+{d8ó‘€-e˜v,6ƒdÚďIo:B
x—…<Ítřöă4~jĂx28’.÷~VœO„Ŕ=CđuśUZ&膰YĆĽ#†F\ ?†ŕu°i×,čЈ˛H"vÔËE­â”؅˙'PŔf*żˆ4¤%mÓý0‰1zZtĽ˙d@V(J€ŕ0˜€@zÓťĺT™ŽâŠć)€¤•%bŚ]†Ŕ…1ľŠ$}ę“$DG/PŐŞü O\čąP gMĺÚSą3ÖI5
gíGC~`¤…E€“†HđUŽĺě°ŻËi]ßt×)ä5+ąA^P… @]K™žŕ‚<ŕn9cŘíJ‚xŔcóŔaę:Ąx*âąj	%9§ƒĎ'řţˆP,´  OP€@@"PA^P&ÖĘfˇi¨ŞŰ"‡)€u‰€	üÖ°@8÷¨K‡Ŕœ‹RZ¤&ŰO–Â,a¸Ă:jß:栜DYlYs‘“0!ƒ2Y_!Üŕ@Á[o§9#„#5”tdŚř
ńŁ;"ŔxĐŢ$ĐŔ1?ŘŔ	$Ŕ€‰r˜,/ٌ‚	rL”	˘€Ű2z†xÄŽ.§`ƒÝxČHÖJ;

PHP Egg

INFO

Summary

The PHP framework running on the remote server has a "PHP Logo" easter egg, access to the PHP egg is possible through the URL: "http://192.168.52.147/bWAPP/?=PHPE9568F34-D428-11d2-A769-00AA001ACF42". This information was found in the request with id 39.

HTTP proof

GET http://192.168.52.147/bWAPP/?=PHPE9568F34-D428-11d2-A769-00AA001ACF42 HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 200 OK
content-length: 2524
x-powered-by: PHP/5.2.4-2ubuntu5
keep-alive: timeout=15, max=98
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:35 GMT
content-type: image/gif

GIF89axCj97G(%*⡤粴CBXRRrުLKc[\;8<nqjmacuy{~ƌkkNNkqtzzrttsZ[~{}mprvȻtx꒒dfknΔ.+/SQhlj\[vfhhj1.9ӜUVxʖŁgi?=P^`ȌWX|" low{vx_^}nosw"YVWtrs񞜝KHIgdeGF_훜ikosٸך̧뚜fdhgnpil!j,xCjm?ms?yy6>qLL>>
2A<B-I"99"/)¡
}MPP}|QQ*rtB3-W(%	&q|.llu.2",@7᤬@F	?;LE5Al`CG$5@ɓ(S\yr\	vA+CD\	/0BˣH&#GXrăΝ~ht##X(K6:,@)3.2@u
HR_`,Q<	e|r˘1|
֬QA<FdpMKJ,Ys;Ea+1p¼ȓv]Ț~cDW Ӽ^yp @p@0DWS9)p&s2J]\R1CQ24@I@bf%&@'I`')7_ਔE@35$GƄb\$,14P#H`G}ElYtQ@]Tg`I)(]ЀR@  b)Er)Vj\| J]lQi4lE]hN^tq(R#l#čI[xA')c` x
j$5NH
"fRla@`^l"]੸EH-vde}!!y6GC,`H?[m3VՁc9֤;9NNścpFZdjpqƹ%K
@!:-J4yj
|AYhQ5EaR4: dY湩Y|tJ\΂3w*}0w
!&e:StJ1wF4mJE,u
P_O8Ƶ'mY*tҐQ:KEF8srJ^pN H1]T{7wJEcS
%Pn[I9ӏ,c	֟	)T%cN:$XLxmB" / EjbytO?,O
(!YtD'BC1|'LI&qbP*w+a!Z\ZC.Q0F
~ J3edHQq%S:pGUZe(px
h	b(@a,ͣЁDHchNC\a!vʡIuHC(_<+Db08'DyX/aR@f𪭩9mXpgyx	$I0R\f PvПe2I)F!
cf9K2paBSHJVD\`.(Ҥ(e2C'P'R`ȅЃ#i@JC.9^0QGt,K!)L$S}$4<Y(rx"e-hrB
XSNi)yeAhLJlrj5ǪDwR$e4zYF`1@@zz$ysӁ@Hj%ŴbakF=a#'L@RK]޽֞ԥ.J2@*=w])Wp-ep0'DHPնׯ'rA)_QY9W%:܃>Ί@``npCYbb"	% `<8) P$&x)Ht@!!
-xx)gGI|Aцp/@>~P3"<4qq;ߙ"ž)@JS}piNKӟ*Ppi7Npl 1F
>PX*Pyw=%lia
cМ7EPn801Z1)P<
l -vBlp
#Pf?܋Aptw;

PHP Egg

INFO

Summary

The PHP framework running on the remote server has a "PHP Credits" easter egg, access to the PHP egg is possible through the URL: "http://192.168.52.147/bWAPP/?=PHPB8B5F2A0-3C92-11d3-A3A9-4C7B08C10000". This information was found in the request with id 40.

HTTP proof

GET http://192.168.52.147/bWAPP/?=PHPB8B5F2A0-3C92-11d3-A3A9-4C7B08C10000 HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 200 OK
x-powered-by: PHP/5.2.4-2ubuntu5
transfer-encoding: chunked
keep-alive: timeout=15, max=98
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:35 GMT
content-type: text/html

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "DTD/xhtml1-transitional.dtd">
<html><head>
<style type="text/css">
body {background-color: #ffffff; color: #000000;}
body, td, th, h1, h2 {font-family: sans-serif;}
pre {margin: 0px; font-family: monospace;}
a:link {color: #000099; text-decoration: none; background-color: #ffffff;}
a:hover {text-decoration: underline;}
table {border-collapse: collapse;}
.center {text-align: center;}
.center table { margin-left: auto; margin-right: auto; text-align: left;}
.center th { text-align: center !important; }
td, th { border: 1px solid #000000; font-size: 75%; vertical-align: baseline;}
h1 {font-size: 150%;}
h2 {font-size: 125%;}
.p {text-align: left;}
.e {background-color: #ccccff; font-weight: bold; color: #000000;}
.h {background-color: #9999cc; font-weight: bold; color: #000000;}
.v {background-color: #cccccc; color: #000000;}
.vr {background-color: #cccccc; text-align: right; color: #000000;}
img {float: right; border: 0px;}
hr {width: 600px; background-color: #cccccc; border: 0px; height: 1px; color: #000000;}
</style>
<title>phpinfo()</title><meta name="ROBOTS" content="NOINDEX,NOFOLLOW,NOARCHIVE" /></head>
<body><div class="center">
<h1>PHP Credits</h1>
<table border="0" cellpadding="3" width="600">
<tr class="h"><th>PHP Group</th></tr>
<tr><td class="e">Thies C. Arntzen, Stig Bakken, Shane Caraveo, Andi Gutmans, Rasmus Lerdorf, Sam Ruby, Sascha Schumann, Zeev Suraski, Jim Winstead, Andrei Zmievski </td></tr>
</table><br />
<table border="0" cellpadding="3" width="600">
<tr class="h"><th>Language Design &amp; Concept</th></tr>
<tr><td class="e">Andi Gutmans, Rasmus Lerdorf, Zeev Suraski </td></tr>
</table><br />
<table border="0" cellpadding="3" width="600">
<tr class="h"><th colspan="2">PHP 5 Authors</th></tr>
<tr class="h"><th>Contribution</th><th>Authors</th></tr>
<tr><td class="e">Zend Scripting Language Engine </td><td class="v">Andi Gutmans, Zeev Suraski </td></tr>
<tr><td class="e">Extension Module API </td><td class="v">Andi Gutmans, Zeev Suraski, Andrei Zmievski </td></tr>
<tr><td class="e">UNIX Build and Modularization </td><td class="v">Stig Bakken, Sascha Schumann </td></tr>
<tr><td class="e">Win32 Port </td><td class="v">Shane Caraveo, Zeev Suraski, Wez Furlong </td></tr>
<tr><td class="e">Server API (SAPI) Abstraction Layer </td><td class="v">Andi Gutmans, Shane Caraveo, Zeev Suraski </td></tr>
<tr><td class="e">Streams Abstraction Layer </td><td class="v">Wez Furlong, Sara Golemon </td></tr>
<tr><td class="e">PHP Data Objects Layer </td><td class="v">Wez Furlong, Marcus Boerger, Sterling Hughes, George Schlossnagle, Ilia Alshanetsky </td></tr>
</table><br />
<table border="0" cellpadding="3" width="600">
<tr class="h"><th colspan="2">SAPI Modules</th></tr>
<tr class="h"><th>Contribution</th><th>Authors</th></tr>
<tr><td class="e">AOLserver </td><td class="v">Sascha Schumann </td></tr>
<tr><td class="e">Apache 1.3 (apache_hooks) </td><td class="v">Rasmus Lerdorf, Zeev Suraski, Stig Bakken, David Sklar, George Schlossnagle, Lukas Schroeder </td></tr>
<tr><td class="e">Apache 1.3 </td><td class="v">Rasmus Lerdorf, Zeev Suraski, Stig Bakken, David Sklar </td></tr>
<tr><td class="e">Apache 2.0 Filter </td><td class="v">Sascha Schumann, Aaron Bannert </td></tr>
<tr><td class="e">Apache 2.0 Handler </td><td class="v">Ian Holsman, Justin Erenkrantz (based on Apache 2.0 Filter code) </td></tr>
<tr><td class="e">Caudium / Roxen </td><td class="v">David Hedbor </td></tr>
<tr><td class="e">CGI / FastCGI </td><td class="v">Rasmus Lerdorf, Stig Bakken, Shane Caraveo, Dmitry Stogov </td></tr>
<tr><td class="e">CLI </td><td class="v">Edin Kadribasic, Marcus Boerger, Johannes Schlueter </td></tr>
<tr><td class="e">Continuity </td><td class="v">Alex Leigh (based on nsapi code) </td></tr>
<tr><td class="e">Embed </td><td class="v">Edin Kadribasic </td></tr>
<tr><td class="e">ISAPI </td><td class="v">Andi Gutmans, Zeev Suraski </td></tr>
<tr><td class="e">NSAPI </td><td class="v">Jayakumar Muthukumarasamy, Uwe Schindler </td></tr>
<tr><td class="e">phttpd </td><td class="v">Thies C. Arntzen </td></tr>
<tr><td class="e">pi3web </td><td class="v">Holger Zimmermann </td></tr>
<tr><td class="e">Sendmail Milter </td><td class="v">Harald Radi </td></tr>
<tr><td class="e">thttpd </td><td class="v">Sascha Schumann </td></tr>
<tr><td class="e">tux </td><td class="v">Sascha Schumann </td></tr>
<tr><td class="e">WebJames </td><td class="v">Alex Waugh </td></tr>
</table><br />
<table border="0" cellpadding="3" width="600">
<tr class="h"><th colspan="2">Module Authors</th></tr>
<tr class="h"><th>Module</th><th>Authors</th></tr>
<tr><td class="e">Assert </td><td class="v">Thies C. Arntzen </td></tr>
<tr><td class="e">BC Math </td><td class="v">Andi Gutmans </td></tr>
<tr><td class="e">Bzip2 </td><td class="v">Sterling Hughes </td></tr>
<tr><td class="e">Calendar </td><td class="v">Shane Caraveo, Colin Viebrock, Hartmut Holzgraefe, Wez Furlong </td></tr>
<tr><td class="e">COM and .Net </td><td class="v">Wez Furlong </td></tr>
<tr><td class="e">ctype </td><td class="v">Hartmut Holzgraefe </td></tr>
<tr><td class="e">cURL </td><td class="v">Sterling Hughes </td></tr>
<tr><td class="e">Date/Time Support </td><td class="v">Derick Rethans </td></tr>
<tr><td class="e">DBA </td><td class="v">Sascha Schumann, Marcus Boerger </td></tr>
<tr><td class="e">dBase </td><td class="v">Jim Winstead </td></tr>
<tr><td class="e">DB-LIB (MS SQL, Sybase) </td><td class="v">Wez Furlong, Frank M. Kromann </td></tr>
<tr><td class="e">DOM </td><td class="v">Christian Stocker, Rob Richards, Marcus Boerger </td></tr>
<tr><td class="e">EXIF </td><td class="v">Rasmus Lerdorf, Marcus Boerger </td></tr>
<tr><td class="e">FBSQL </td><td class="v">Frank M. Kromann </td></tr>
<tr><td class="e">FDF </td><td class="v">Uwe Steinmann </td></tr>
<tr><td class="e">Firebird/InterBase driver for PDO </td><td class="v">Ard Biesheuvel </td></tr>
<tr><td class="e">FTP </td><td class="v">Stefan Esser, Andrew Skalski </td></tr>
<tr><td class="e">GD imaging </td><td class="v">Rasmus Lerdorf, Stig Bakken, Jim Winstead, Jouni Ahto, Ilia Alshanetsky, Pierre-Alain Joye, Marcus Boerger </td></tr>
<tr><td class="e">GetText </td><td class="v">Alex Plotnick </td></tr>
<tr><td class="e">GNU GMP support </td><td class="v">Stanislav Malyshev </td></tr>
<tr><td class="e">Iconv </td><td class="v">Rui Hirokawa, Stig Bakken, Moriyoshi Koizumi  </td></tr>
<tr><td class="e">IMAP </td><td class="v">Rex Logan, Mark Musone, Brian Wang, Kaj-Michael Lang, Antoni Pamies Olive, Rasmus Lerdorf, Andrew Skalski, Chuck Hagenbuch, Daniel R Kalowsky </td></tr>
<tr><td class="e">Input Filter </td><td class="v">Rasmus Lerdorf, Derick Rethans, Pierre-Alain Joye, Ilia Alshanetsky </td></tr>
<tr><td class="e">InterBase </td><td class="v">Jouni Ahto, Andrew Avdeev, Ard Biesheuvel </td></tr>
<tr><td class="e">JSON </td><td class="v">Omar Kilani </td></tr>
<tr><td class="e">LDAP </td><td class="v">Amitay Isaacs, Eric Warnke, Rasmus Lerdorf, Gerrit Thomson, Stig Venaas </td></tr>
<tr><td class="e">LIBXML </td><td class="v">Christian Stocker, Rob Richards, Marcus Boerger, Wez Furlong, Shane Caraveo </td></tr>
<tr><td class="e">mcrypt </td><td class="v">Sascha Schumann, Derick Rethans </td></tr>
<tr><td class="e">mhash </td><td class="v">Sascha Schumann </td></tr>
<tr><td class="e">mime_magic </td><td class="v">Hartmut Holzgraefe </td></tr>
<tr><td class="e">MING </td><td class="v">Dave Hayden, Frank M. Kromann </td></tr>
<tr><td class="e">mSQL </td><td class="v">Zeev Suraski </td></tr>
<tr><td class="e">MS SQL </td><td class="v">Frank M. Kromann </td></tr>
<tr><td class="e">Multibyte String Functions </td><td class="v">Tsukada Takuya, Rui Hirokawa </td></tr>
<tr><td class="e">mySQL driver for PDO </td><td class="v">George Schlossnagle, Wez Furlong, Ilia Alshanetsky </td></tr>
<tr><td class="e">MySQLi </td><td class="v">Zak Greant, Georg Richter, Andrey Hristov, Ulf Wendel </td></tr>
<tr><td class="e">MySQL </td><td class="v">Zeev Suraski, Zak Greant, Georg Richter </td></tr>
<tr><td class="e">ncurses </td><td class="v">Ilia Alshanetsky, Wez Furlong, Hartmut Holzgraefe, Georg Richter </td></tr>
<tr><td class="e">OCI8 </td><td class="v">Stig Bakken, Thies C. Arntzen, Andy Sautins, David Benson, Maxim Maletsky, Harald Radi, Antony Dovgal, Andi Gutmans, Wez Furlong </td></tr>
<tr><td class="e">ODBC driver for PDO </td><td class="v">Wez Furlong </td></tr>
<tr><td class="e">ODBC </td><td class="v">Stig Bakken, Andreas Karajannis, Frank M. Kromann, Daniel R. Kalowsky </td></tr>
<tr><td class="e">OpenSSL </td><td class="v">Stig Venaas, Wez Furlong, Sascha Kettler </td></tr>
<tr><td class="e">Oracle (OCI) driver for PDO </td><td class="v">Wez Furlong </td></tr>
<tr><td class="e">pcntl </td><td class="v">Jason Greene </td></tr>
<tr><td class="e">Perl Compatible Regexps </td><td class="v">Andrei Zmievski </td></tr>
<tr><td class="e">PHP Data Objects </td><td class="v">Wez Furlong, Marcus Boerger, Sterling Hughes, George Schlossnagle, Ilia Alshanetsky </td></tr>
<tr><td class="e">PHP hash </td><td class="v">Sara Golemon, Rasmus Lerdorf, Stefan Esser, Michael Wallner </td></tr>
<tr><td class="e">Posix </td><td class="v">Kristian Koehntopp </td></tr>
<tr><td class="e">PostgreSQL driver for PDO </td><td class="v">Edin Kadribasic, Ilia Alshanetsky </td></tr>
<tr><td class="e">PostgreSQL </td><td class="v">Jouni Ahto, Zeev Suraski, Yasuo Ohgaki, Chris Kings-Lynne </td></tr>
<tr><td class="e">Pspell </td><td class="v">Vlad Krupin </td></tr>
<tr><td class="e">Readline </td><td class="v">Thies C. Arntzen </td></tr>
<tr><td class="e">Recode </td><td class="v">Kristian K\xf6hntopp </td></tr>
<tr><td class="e">Reflection </td><td class="v">Marcus Boerger, Timm Friebe, George Schlossnagle, Andrei Zmievski, Johannes Schlueter </td></tr>
<tr><td class="e">Sessions </td><td class="v">Sascha Schumann, Andrei Zmievski </td></tr>
<tr><td class="e">Shared Memory Operations </td><td class="v">Slava Poliakov, Ilia Alshanetsky </td></tr>
<tr><td class="e">SimpleXML </td><td class="v">Sterling Hughes, Marcus Boerger, Rob Richards </td></tr>
<tr><td class="e">SNMP </td><td class="v">Rasmus Lerdorf, Harrie Hazewinkel, Mike Jackson, Steven Lawrance, Johann Hanne </td></tr>
<tr><td class="e">SOAP </td><td class="v">Brad Lafountain, Shane Caraveo, Dmitry Stogov </td></tr>
<tr><td class="e">Sockets </td><td class="v">Chris Vandomelen, Sterling Hughes, Daniel Beulshausen, Jason Greene </td></tr>
<tr><td class="e">SPL </td><td class="v">Marcus Boerger </td></tr>
<tr><td class="e">SQLite 3.x driver for PDO </td><td class="v">Wez Furlong </td></tr>
<tr><td class="e">SQLite </td><td class="v">Wez Furlong, Tal Peer, Marcus Boerger, Ilia Alshanetsky </td></tr>
<tr><td class="e">Sybase-CT </td><td class="v">Zeev Suraski, Tom May, Timm Friebe </td></tr>
<tr><td class="e">Sybase-DB </td><td class="v">Zeev Suraski </td></tr>
<tr><td class="e">System V Message based IPC </td><td class="v">Wez Furlong </td></tr>
<tr><td class="e">System V Semaphores </td><td class="v">Tom May </td></tr>
<tr><td class="e">System V Shared Memory </td><td class="v">Christian Cartus </td></tr>
<tr><td class="e">tidy </td><td class="v">John Coggeshall, Ilia Alshanetsky </td></tr>
<tr><td class="e">tokenizer </td><td class="v">Andrei Zmievski </td></tr>
<tr><td class="e">WDDX </td><td class="v">Andrei Zmievski </td></tr>
<tr><td class="e">XMLReader </td><td class="v">Rob Richards </td></tr>
<tr><td class="e">xmlrpc </td><td class="v">Dan Libby </td></tr>
<tr><td class="e">XML </td><td class="v">Stig Bakken, Thies C. Arntzen, Sterling Hughes </td></tr>
<tr><td class="e">XMLWriter </td><td class="v">Rob Richards, Pierre-Alain Joye </td></tr>
<tr><td class="e">XSL </td><td class="v">Christian Stocker, Rob Richards </td></tr>
<tr><td class="e">Zip </td><td class="v">Pierre-Alain Joye </td></tr>
<tr><td class="e">Zlib </td><td class="v">Rasmus Lerdorf, Stefan Roehrich, Zeev Suraski, Jade Nicoletti </td></tr>
</table><br />
<table border="0" cellpadding="3" width="600">
<tr class="h"><th colspan="2">PHP Documentation</th></tr>
<tr><td class="e">Authors </td><td class="v">Mehdi Achour, Friedhelm Betz, Antony Dovgal, Nuno Lopes, Philip Olson, Georg Richter, Damien Seguy, Jakub Vrana </td></tr>
<tr><td class="e">Editor </td><td class="v">Philip Olson </td></tr>
<tr><td class="e">User Note Maintainers </td><td class="v">Mehdi Achour, Friedhelm Betz, Vincent Gevers, Aidan Lister, Nuno Lopes, Tom Sommer </td></tr>
<tr><td class="e">Other Contributors </td><td class="v">Previously active authors, editors and other contributors are listed in the manual. </td></tr>
</table><br />
<table border="0" cellpadding="3" width="600">
<tr class="h"><th>PHP Quality Assurance Team</th></tr>
<tr><td class="e">Ilia Alshanetsky, Joerg Behrens, Antony Dovgal, Stefan Esser, Moriyoshi Koizumi, Magnus Maatta, Sebastian Nohn, Derick Rethans, Melvyn Sopacua, Jani Taskinen </td></tr>
</table><br />
<table border="0" cellpadding="3" width="600">
<tr class="h"><th>PHP Website Team</th></tr>
<tr><td class="e">Hannes Magnusson, Colin Viebrock, Jim Winstead </td></tr>
</table><br />
</div></body></html>

PHP Egg

INFO

Summary

The PHP framework running on the remote server has a "PHP Logo 2" easter egg, access to the PHP egg is possible through the URL: "http://192.168.52.147/bWAPP/?=PHPE9568F36-D428-11d2-A769-00AA001ACF42". This information was found in the request with id 42.

HTTP proof

GET http://192.168.52.147/bWAPP/?=PHPE9568F36-D428-11d2-A769-00AA001ACF42 HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 200 OK
content-length: 3810
x-powered-by: PHP/5.2.4-2ubuntu5
keep-alive: timeout=15, max=98
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:35 GMT
content-type: image/gif

GIF89axCkrjq???jpiojoin///#$(___X]tz}&&)hlimffhl-.:oooflOOO()1\b55?zzhk23C--4EHh==J;>VgjkkIMqfg68Lag##&ݑgiNRzLL_\\uiigi@C_rrllTTjfh00=*rrSXy~敕Ȓō77CDž||nsX[V\W\UV}v{yz|RV''.ccEEUaeKKksyekRTeff59YEGemt99L]cuu>?VTTzOOrpu::GjjLLeBGo}VXlpdi55F_a:<QRU}pvRRjruÆoono]]MOtswgl<@dbb((/33?EE_INz66:
lrelXXjlV[TTtVVZ[[{mmuhhVVsZ\lQSzgjFFcy~IJ^mmsssjj;?bCE`fixxDDZYYs34Oqq!#7OOh^_VYppPQv?AZfg|~HHbHJdppz}12@NNnww}~MQw}~88Hvx.1M\`AAQ13BPRoioJMkmouxABZhh{nq!,xCH*\ȰÇ#JHŋ3jѢ+htIҠT2(KzpAE8S	&EXRĆ,(@AGʝkc0`CȋB>$g:\8K#ҷpX:CqV8AD[۹=⎠AǧQfGEw
;<HK|bvC
 6\2DO:cɎ1Dpxs
F+}pTc#2X FADo^@z8|ۃ-lC:`է@&ID=dHA!2,3A.R%"s8b3L!@py@p"1'
xQhhތD(P\`G}\ChkЁ'KC#Z"@0@
&92`b\HB<'( B~2A&$ ^`@Hg9*l7iBRb摥@t^*3,{04XQjQ=+XF.9ι4A
LK
lPl峫0Ŵ.@<~—~@D`@&0^'D?dAº6@
 g&kpC-@Dg kQ)m1$DK-Q1sc<5$M\$ANK>e@
z;FY
%ptr@8fPP1CB

YL9$P,q&VQ
JE}"א?PȲR30C9J}@V@įn0ЂsQg;#%$D%w?9
q@P]G@ 
:`67oiZʂ0:
nd8,0@DB^$Pt!j:8
 !ARY G
E]UJDY@+( :'1҉д	@*];@F‘p>PH JP[b> %[@@5̓pաun.P22DWL*>8C@#ġ
JY8&2_ALdUWg
Ga|еPޠ9|@-OQ@B@I W@`Y
Gc!bN,@[\ 9d &@@Zdyʢ	Ç=+\	0p$%Q`-E :^,Y
xzH`	0Su+\%
Hfg8M(
Ù&s08eQBe	<(Mp(g@S-lV`]Pa /P>s4uH "9
x)B%SPl#R	gTJܓGi^h5	axYh25V^;
?v
B&@wP짅{b
L
T@-@j0hg&h@<ru3&tI &0˩we4FvU9u͑rޔb؀ Zq@dhO,].HxU1rTQW\[z4D/(
VPB`hēat9*kWu_H aG H+ 0~Y)8Zm4f~ĬCQ!RT*c‘eH?"b?#f:Շ;}!$*<
l4l5뙁M> fNZ)7`R)4d}mp
lV:	<1%C"2$JSU{́kYUhq`p22Ye	MxnP\<(vJ~axD"=hoGC
P9V*	H+HDOx쪶U%&d=@⪆ |5lJAig	
~ 0z42>+GKl&$	ԹP#.)l@g>$z~GĂX,X{B\Pa~^Yi؊Oos`.J`'(M UtC~}'#6<fz1GL''\wSKL y;~J=`,J2pY#%&̳s:ؓ}(2@k
 p03#q".W9 bK	AHZĢƠ:4k!}
7`#@
o1U`ReJ{ 8->~@`8P1	rFKhWk8/
0.%o! % Cp8QhQ] 2(9׆28-
z	PTP g
80D0|%bQp}+0''`(?R@	!@ZD@ 	r{'!.AUL(@p	|	3PP-!?lg0 	>aC;AK4p+P	|rgݠ:/ H> 	>F1
PIpv_
bF
7 R2`GP/`qT}	ٗMw

T>PЙ9);

Fingerprinted PHP version

INFO

Summary

A PHP easter egg was found that matches several different versions of PHP. The PHP framework version running on the remote server was identified as one of the following: - 5.2.5 - 5.2.4-2ubuntu5.3. This information was found in the requests with ids 38 to 40 and 42.

HTTP proof

GET http://192.168.52.147/bWAPP/?=PHPE9568F35-D428-11d2-A769-00AA001ACF42 HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 200 OK
content-length: 2146
x-powered-by: PHP/5.2.4-2ubuntu5
keep-alive: timeout=15, max=99
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:35 GMT
content-type: image/gif

GIF89aqHŐ

	.D^'
+:	*&iŤCm
$;
-	)#` WŽO‚Fr6WM|
*"X
&)7Pi-?Q159	*UŠ!\•Iu
- YŽT†Hs*C>c 3!	)#%3:?122˙f˙˙˙ĚĚĚÇÇÇżżżŤŤŤ’’’sssUUU<<<777&&&,qH˙Ŕ™pH,Č¤ryü1ŸĐ¨”řŤ:§ŇŤĐŞĹzżFmŒěŠÉčďyfÝşŮŰŤS.nĎë´ž|‡ťĺ€pylv„{‰MvxˆsmuU~““€cŠ‰ck’’”…Ÿ}ˆ˜Ł—‡yT\ŠoŁŻ°S—ą´ľĄś¸šşťź˝C68:85žĹX79<?+8ĆĐJŔ:?##/ŃŢC5ÉË"Úç%?6ßŢ<ŘçńçÎLÁ7ě°?'ňü#(:Kr(đă>L<ô“7ĄĘ9†Éńc‚ż‚á0°0‰&0XQĆ3Šľ54˜1ć:.<ÂJĘs+[ępSf?˙&zâü‘C'™/Dř\ş°aQŁXlź0P‚ŠU†DĄJą ‰Ť`‡>Őş„Ť×°hG4źG6	ŇłiĂŚcŰÖĆ:"0|Ő&ŁŻßż2„Ř‹ś„ÄúÚ%FĆƍǐßýrŁ
aŔ~d;°
ĺҒ0€XHß9&oĹŁľë×:tDd<†ˆP¨˘0^_R¨PŃ׀'_%Q ´iąé>öşşőŃąTŒGa‚rm!L0˜°Ŕo‡ŢÓ6§=Łoö'7ŽËŻţJĺ˜>I„<˘/ƒ„ŕ›_‚‘ĐY(tÓ:H‡D|ÖĹ&ĄóIČŢĄŐן%Ç˙`tćß	ü â
J#߄ŽKLŔ€BX~Ą Bz|ÉpĂ}6A_Wă	~éŔ}Ąč ]ϸČb‹JĹv`ů €ňHH!ô•zĺÉŕi<4Řƒâ`ÂNJ˜Ă
ÄĐŔZ”ąŮS•2pˆÜ^"؟Ăeă%q2ŔœîĽHIJ¸äuB‘áU5ŢH˜ˆ*˜ ŕo*
(ĄeŢ`C_=(:
7pÝeâ@ƒ6@*ĺ2âů_€îŚqÂiúg żZč
;ů‚¨8 ĆĂ
ÖĄƒő!}ąľ•L‰č&„	Ř	]~ęi "^Ё˜p˙(TP°šĂ…DČú"|wfŤmqŽîo q:n§&üŐŔÁH Á€Ŕ€Ży Bećđ*5ŘŤƒjIŕ XÝŮŘăČžę'Ňp$žŻţš i	ěX)SđAĂ 8ě€k$Đ@
)ĄąľJTśÂU-ľď†ěĽ—_éÇßR(	'8\w=`‡Ý€@ď/;X45ㄶĐҀ˛LŁ.‡ĐőÝ\6Ř	˜Đ0@HíĹ4˜ĐŃoÁĚďfh-`€	ŕ-ů×a3đ
˜P8ĐŐ&ÇľőÖĎo`‚’Hr‡EÂ
&@‚äxGđľ‘Cđ˙€,¤B´	Ł8p¸¸ňčwŕÔ8˜_üXx˙%ŘÍD ŔÔ@ƒĆ:\Feß}Ź<ÚŚü•ˆ)ű@ůÉuÝYʗƒpű	ÓÂ6ĄÚXԀí€Ď#¤}ANÎ¤őE"ř_
†DôeGaMíFđřn:P
?0%7/Š€V
˜„Ś$p„S€(4Ďt[ăÚÚD42ŕ _ä“Ż†ÓAâ
ŠtŢůM
&4 /`[Sŕ€>Ĺ°k ŕŢŮŔđ‚m…[ňŸ?%°?@Dl€č%’QDĐŁH§Ř€UÉB͛nŕ=%Ü˙?âëׇÂ,Nů=VűA$Đ4ąˆedaĂĹŤ4ÚÍu3lŁŠ„Ť6vŽŽE0Křŕ˘-’Ť3 ÝiFRZí[ƒ‰¤%‰PIîÝV]	_ň´e€.
ě”~ąF™DE&˙*"h" Jj	cő3ć“~7ƒIJ#á™4ƒR7đTk<ę” n+{d8ó‘€-e˜v,6ƒdÚďIo:B
x—…<Ítřöă4~jĂx28’.÷~VœO„Ŕ=CđuśUZ&膰YĆĽ#†F\ ?†ŕu°i×,čЈ˛H"vÔËE­â”؅˙'PŔf*żˆ4¤%mÓý0‰1zZtĽ˙d@V(J€ŕ0˜€@zÓťĺT™ŽâŠć)€¤•%bŚ]†Ŕ…1ľŠ$}ę“$DG/PŐŞü O\čąP gMĺÚSą3ÖI5
gíGC~`¤…E€“†HđUŽĺě°ŻËi]ßt×)ä5+ąA^P… @]K™žŕ‚<ŕn9cŘíJ‚xŔcóŔaę:Ąx*âąj	%9§ƒĎ'řţˆP,´  OP€@@"PA^P&ÖĘfˇi¨ŞŰ"‡)€u‰€	üÖ°@8÷¨K‡Ŕœ‹RZ¤&ŰO–Â,a¸Ă:jß:栜DYlYs‘“0!ƒ2Y_!Üŕ@Á[o§9#„#5”tdŚř
ńŁ;"ŔxĐŢ$ĐŔ1?ŘŔ	$Ŕ€‰r˜,/ٌ‚	rL”	˘€Ű2z†xÄŽ.§`ƒÝxČHÖJ;
GET http://192.168.52.147/bWAPP/?=PHPE9568F34-D428-11d2-A769-00AA001ACF42 HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 200 OK
content-length: 2524
x-powered-by: PHP/5.2.4-2ubuntu5
keep-alive: timeout=15, max=98
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:35 GMT
content-type: image/gif

GIF89axCj97G(%*⡤粴CBXRRrުLKc[\;8<nqjmacuy{~ƌkkNNkqtzzrttsZ[~{}mprvȻtx꒒dfknΔ.+/SQhlj\[vfhhj1.9ӜUVxʖŁgi?=P^`ȌWX|" low{vx_^}nosw"YVWtrs񞜝KHIgdeGF_훜ikosٸך̧뚜fdhgnpil!j,xCjm?ms?yy6>qLL>>
2A<B-I"99"/)¡
}MPP}|QQ*rtB3-W(%	&q|.llu.2",@7᤬@F	?;LE5Al`CG$5@ɓ(S\yr\	vA+CD\	/0BˣH&#GXrăΝ~ht##X(K6:,@)3.2@u
HR_`,Q<	e|r˘1|
֬QA<FdpMKJ,Ys;Ea+1p¼ȓv]Ț~cDW Ӽ^yp @p@0DWS9)p&s2J]\R1CQ24@I@bf%&@'I`')7_ਔE@35$GƄb\$,14P#H`G}ElYtQ@]Tg`I)(]ЀR@  b)Er)Vj\| J]lQi4lE]hN^tq(R#l#čI[xA')c` x
j$5NH
"fRla@`^l"]੸EH-vde}!!y6GC,`H?[m3VՁc9֤;9NNścpFZdjpqƹ%K
@!:-J4yj
|AYhQ5EaR4: dY湩Y|tJ\΂3w*}0w
!&e:StJ1wF4mJE,u
P_O8Ƶ'mY*tҐQ:KEF8srJ^pN H1]T{7wJEcS
%Pn[I9ӏ,c	֟	)T%cN:$XLxmB" / EjbytO?,O
(!YtD'BC1|'LI&qbP*w+a!Z\ZC.Q0F
~ J3edHQq%S:pGUZe(px
h	b(@a,ͣЁDHchNC\a!vʡIuHC(_<+Db08'DyX/aR@f𪭩9mXpgyx	$I0R\f PvПe2I)F!
cf9K2paBSHJVD\`.(Ҥ(e2C'P'R`ȅЃ#i@JC.9^0QGt,K!)L$S}$4<Y(rx"e-hrB
XSNi)yeAhLJlrj5ǪDwR$e4zYF`1@@zz$ysӁ@Hj%ŴbakF=a#'L@RK]޽֞ԥ.J2@*=w])Wp-ep0'DHPնׯ'rA)_QY9W%:܃>Ί@``npCYbb"	% `<8) P$&x)Ht@!!
-xx)gGI|Aцp/@>~P3"<4qq;ߙ"ž)@JS}piNKӟ*Ppi7Npl 1F
>PX*Pyw=%lia
cМ7EPn801Z1)P<
l -vBlp
#Pf?܋Aptw;
GET http://192.168.52.147/bWAPP/?=PHPB8B5F2A0-3C92-11d3-A3A9-4C7B08C10000 HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 200 OK
x-powered-by: PHP/5.2.4-2ubuntu5
transfer-encoding: chunked
keep-alive: timeout=15, max=98
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:35 GMT
content-type: text/html

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "DTD/xhtml1-transitional.dtd">
<html><head>
<style type="text/css">
body {background-color: #ffffff; color: #000000;}
body, td, th, h1, h2 {font-family: sans-serif;}
pre {margin: 0px; font-family: monospace;}
a:link {color: #000099; text-decoration: none; background-color: #ffffff;}
a:hover {text-decoration: underline;}
table {border-collapse: collapse;}
.center {text-align: center;}
.center table { margin-left: auto; margin-right: auto; text-align: left;}
.center th { text-align: center !important; }
td, th { border: 1px solid #000000; font-size: 75%; vertical-align: baseline;}
h1 {font-size: 150%;}
h2 {font-size: 125%;}
.p {text-align: left;}
.e {background-color: #ccccff; font-weight: bold; color: #000000;}
.h {background-color: #9999cc; font-weight: bold; color: #000000;}
.v {background-color: #cccccc; color: #000000;}
.vr {background-color: #cccccc; text-align: right; color: #000000;}
img {float: right; border: 0px;}
hr {width: 600px; background-color: #cccccc; border: 0px; height: 1px; color: #000000;}
</style>
<title>phpinfo()</title><meta name="ROBOTS" content="NOINDEX,NOFOLLOW,NOARCHIVE" /></head>
<body><div class="center">
<h1>PHP Credits</h1>
<table border="0" cellpadding="3" width="600">
<tr class="h"><th>PHP Group</th></tr>
<tr><td class="e">Thies C. Arntzen, Stig Bakken, Shane Caraveo, Andi Gutmans, Rasmus Lerdorf, Sam Ruby, Sascha Schumann, Zeev Suraski, Jim Winstead, Andrei Zmievski </td></tr>
</table><br />
<table border="0" cellpadding="3" width="600">
<tr class="h"><th>Language Design &amp; Concept</th></tr>
<tr><td class="e">Andi Gutmans, Rasmus Lerdorf, Zeev Suraski </td></tr>
</table><br />
<table border="0" cellpadding="3" width="600">
<tr class="h"><th colspan="2">PHP 5 Authors</th></tr>
<tr class="h"><th>Contribution</th><th>Authors</th></tr>
<tr><td class="e">Zend Scripting Language Engine </td><td class="v">Andi Gutmans, Zeev Suraski </td></tr>
<tr><td class="e">Extension Module API </td><td class="v">Andi Gutmans, Zeev Suraski, Andrei Zmievski </td></tr>
<tr><td class="e">UNIX Build and Modularization </td><td class="v">Stig Bakken, Sascha Schumann </td></tr>
<tr><td class="e">Win32 Port </td><td class="v">Shane Caraveo, Zeev Suraski, Wez Furlong </td></tr>
<tr><td class="e">Server API (SAPI) Abstraction Layer </td><td class="v">Andi Gutmans, Shane Caraveo, Zeev Suraski </td></tr>
<tr><td class="e">Streams Abstraction Layer </td><td class="v">Wez Furlong, Sara Golemon </td></tr>
<tr><td class="e">PHP Data Objects Layer </td><td class="v">Wez Furlong, Marcus Boerger, Sterling Hughes, George Schlossnagle, Ilia Alshanetsky </td></tr>
</table><br />
<table border="0" cellpadding="3" width="600">
<tr class="h"><th colspan="2">SAPI Modules</th></tr>
<tr class="h"><th>Contribution</th><th>Authors</th></tr>
<tr><td class="e">AOLserver </td><td class="v">Sascha Schumann </td></tr>
<tr><td class="e">Apache 1.3 (apache_hooks) </td><td class="v">Rasmus Lerdorf, Zeev Suraski, Stig Bakken, David Sklar, George Schlossnagle, Lukas Schroeder </td></tr>
<tr><td class="e">Apache 1.3 </td><td class="v">Rasmus Lerdorf, Zeev Suraski, Stig Bakken, David Sklar </td></tr>
<tr><td class="e">Apache 2.0 Filter </td><td class="v">Sascha Schumann, Aaron Bannert </td></tr>
<tr><td class="e">Apache 2.0 Handler </td><td class="v">Ian Holsman, Justin Erenkrantz (based on Apache 2.0 Filter code) </td></tr>
<tr><td class="e">Caudium / Roxen </td><td class="v">David Hedbor </td></tr>
<tr><td class="e">CGI / FastCGI </td><td class="v">Rasmus Lerdorf, Stig Bakken, Shane Caraveo, Dmitry Stogov </td></tr>
<tr><td class="e">CLI </td><td class="v">Edin Kadribasic, Marcus Boerger, Johannes Schlueter </td></tr>
<tr><td class="e">Continuity </td><td class="v">Alex Leigh (based on nsapi code) </td></tr>
<tr><td class="e">Embed </td><td class="v">Edin Kadribasic </td></tr>
<tr><td class="e">ISAPI </td><td class="v">Andi Gutmans, Zeev Suraski </td></tr>
<tr><td class="e">NSAPI </td><td class="v">Jayakumar Muthukumarasamy, Uwe Schindler </td></tr>
<tr><td class="e">phttpd </td><td class="v">Thies C. Arntzen </td></tr>
<tr><td class="e">pi3web </td><td class="v">Holger Zimmermann </td></tr>
<tr><td class="e">Sendmail Milter </td><td class="v">Harald Radi </td></tr>
<tr><td class="e">thttpd </td><td class="v">Sascha Schumann </td></tr>
<tr><td class="e">tux </td><td class="v">Sascha Schumann </td></tr>
<tr><td class="e">WebJames </td><td class="v">Alex Waugh </td></tr>
</table><br />
<table border="0" cellpadding="3" width="600">
<tr class="h"><th colspan="2">Module Authors</th></tr>
<tr class="h"><th>Module</th><th>Authors</th></tr>
<tr><td class="e">Assert </td><td class="v">Thies C. Arntzen </td></tr>
<tr><td class="e">BC Math </td><td class="v">Andi Gutmans </td></tr>
<tr><td class="e">Bzip2 </td><td class="v">Sterling Hughes </td></tr>
<tr><td class="e">Calendar </td><td class="v">Shane Caraveo, Colin Viebrock, Hartmut Holzgraefe, Wez Furlong </td></tr>
<tr><td class="e">COM and .Net </td><td class="v">Wez Furlong </td></tr>
<tr><td class="e">ctype </td><td class="v">Hartmut Holzgraefe </td></tr>
<tr><td class="e">cURL </td><td class="v">Sterling Hughes </td></tr>
<tr><td class="e">Date/Time Support </td><td class="v">Derick Rethans </td></tr>
<tr><td class="e">DBA </td><td class="v">Sascha Schumann, Marcus Boerger </td></tr>
<tr><td class="e">dBase </td><td class="v">Jim Winstead </td></tr>
<tr><td class="e">DB-LIB (MS SQL, Sybase) </td><td class="v">Wez Furlong, Frank M. Kromann </td></tr>
<tr><td class="e">DOM </td><td class="v">Christian Stocker, Rob Richards, Marcus Boerger </td></tr>
<tr><td class="e">EXIF </td><td class="v">Rasmus Lerdorf, Marcus Boerger </td></tr>
<tr><td class="e">FBSQL </td><td class="v">Frank M. Kromann </td></tr>
<tr><td class="e">FDF </td><td class="v">Uwe Steinmann </td></tr>
<tr><td class="e">Firebird/InterBase driver for PDO </td><td class="v">Ard Biesheuvel </td></tr>
<tr><td class="e">FTP </td><td class="v">Stefan Esser, Andrew Skalski </td></tr>
<tr><td class="e">GD imaging </td><td class="v">Rasmus Lerdorf, Stig Bakken, Jim Winstead, Jouni Ahto, Ilia Alshanetsky, Pierre-Alain Joye, Marcus Boerger </td></tr>
<tr><td class="e">GetText </td><td class="v">Alex Plotnick </td></tr>
<tr><td class="e">GNU GMP support </td><td class="v">Stanislav Malyshev </td></tr>
<tr><td class="e">Iconv </td><td class="v">Rui Hirokawa, Stig Bakken, Moriyoshi Koizumi  </td></tr>
<tr><td class="e">IMAP </td><td class="v">Rex Logan, Mark Musone, Brian Wang, Kaj-Michael Lang, Antoni Pamies Olive, Rasmus Lerdorf, Andrew Skalski, Chuck Hagenbuch, Daniel R Kalowsky </td></tr>
<tr><td class="e">Input Filter </td><td class="v">Rasmus Lerdorf, Derick Rethans, Pierre-Alain Joye, Ilia Alshanetsky </td></tr>
<tr><td class="e">InterBase </td><td class="v">Jouni Ahto, Andrew Avdeev, Ard Biesheuvel </td></tr>
<tr><td class="e">JSON </td><td class="v">Omar Kilani </td></tr>
<tr><td class="e">LDAP </td><td class="v">Amitay Isaacs, Eric Warnke, Rasmus Lerdorf, Gerrit Thomson, Stig Venaas </td></tr>
<tr><td class="e">LIBXML </td><td class="v">Christian Stocker, Rob Richards, Marcus Boerger, Wez Furlong, Shane Caraveo </td></tr>
<tr><td class="e">mcrypt </td><td class="v">Sascha Schumann, Derick Rethans </td></tr>
<tr><td class="e">mhash </td><td class="v">Sascha Schumann </td></tr>
<tr><td class="e">mime_magic </td><td class="v">Hartmut Holzgraefe </td></tr>
<tr><td class="e">MING </td><td class="v">Dave Hayden, Frank M. Kromann </td></tr>
<tr><td class="e">mSQL </td><td class="v">Zeev Suraski </td></tr>
<tr><td class="e">MS SQL </td><td class="v">Frank M. Kromann </td></tr>
<tr><td class="e">Multibyte String Functions </td><td class="v">Tsukada Takuya, Rui Hirokawa </td></tr>
<tr><td class="e">mySQL driver for PDO </td><td class="v">George Schlossnagle, Wez Furlong, Ilia Alshanetsky </td></tr>
<tr><td class="e">MySQLi </td><td class="v">Zak Greant, Georg Richter, Andrey Hristov, Ulf Wendel </td></tr>
<tr><td class="e">MySQL </td><td class="v">Zeev Suraski, Zak Greant, Georg Richter </td></tr>
<tr><td class="e">ncurses </td><td class="v">Ilia Alshanetsky, Wez Furlong, Hartmut Holzgraefe, Georg Richter </td></tr>
<tr><td class="e">OCI8 </td><td class="v">Stig Bakken, Thies C. Arntzen, Andy Sautins, David Benson, Maxim Maletsky, Harald Radi, Antony Dovgal, Andi Gutmans, Wez Furlong </td></tr>
<tr><td class="e">ODBC driver for PDO </td><td class="v">Wez Furlong </td></tr>
<tr><td class="e">ODBC </td><td class="v">Stig Bakken, Andreas Karajannis, Frank M. Kromann, Daniel R. Kalowsky </td></tr>
<tr><td class="e">OpenSSL </td><td class="v">Stig Venaas, Wez Furlong, Sascha Kettler </td></tr>
<tr><td class="e">Oracle (OCI) driver for PDO </td><td class="v">Wez Furlong </td></tr>
<tr><td class="e">pcntl </td><td class="v">Jason Greene </td></tr>
<tr><td class="e">Perl Compatible Regexps </td><td class="v">Andrei Zmievski </td></tr>
<tr><td class="e">PHP Data Objects </td><td class="v">Wez Furlong, Marcus Boerger, Sterling Hughes, George Schlossnagle, Ilia Alshanetsky </td></tr>
<tr><td class="e">PHP hash </td><td class="v">Sara Golemon, Rasmus Lerdorf, Stefan Esser, Michael Wallner </td></tr>
<tr><td class="e">Posix </td><td class="v">Kristian Koehntopp </td></tr>
<tr><td class="e">PostgreSQL driver for PDO </td><td class="v">Edin Kadribasic, Ilia Alshanetsky </td></tr>
<tr><td class="e">PostgreSQL </td><td class="v">Jouni Ahto, Zeev Suraski, Yasuo Ohgaki, Chris Kings-Lynne </td></tr>
<tr><td class="e">Pspell </td><td class="v">Vlad Krupin </td></tr>
<tr><td class="e">Readline </td><td class="v">Thies C. Arntzen </td></tr>
<tr><td class="e">Recode </td><td class="v">Kristian K\xf6hntopp </td></tr>
<tr><td class="e">Reflection </td><td class="v">Marcus Boerger, Timm Friebe, George Schlossnagle, Andrei Zmievski, Johannes Schlueter </td></tr>
<tr><td class="e">Sessions </td><td class="v">Sascha Schumann, Andrei Zmievski </td></tr>
<tr><td class="e">Shared Memory Operations </td><td class="v">Slava Poliakov, Ilia Alshanetsky </td></tr>
<tr><td class="e">SimpleXML </td><td class="v">Sterling Hughes, Marcus Boerger, Rob Richards </td></tr>
<tr><td class="e">SNMP </td><td class="v">Rasmus Lerdorf, Harrie Hazewinkel, Mike Jackson, Steven Lawrance, Johann Hanne </td></tr>
<tr><td class="e">SOAP </td><td class="v">Brad Lafountain, Shane Caraveo, Dmitry Stogov </td></tr>
<tr><td class="e">Sockets </td><td class="v">Chris Vandomelen, Sterling Hughes, Daniel Beulshausen, Jason Greene </td></tr>
<tr><td class="e">SPL </td><td class="v">Marcus Boerger </td></tr>
<tr><td class="e">SQLite 3.x driver for PDO </td><td class="v">Wez Furlong </td></tr>
<tr><td class="e">SQLite </td><td class="v">Wez Furlong, Tal Peer, Marcus Boerger, Ilia Alshanetsky </td></tr>
<tr><td class="e">Sybase-CT </td><td class="v">Zeev Suraski, Tom May, Timm Friebe </td></tr>
<tr><td class="e">Sybase-DB </td><td class="v">Zeev Suraski </td></tr>
<tr><td class="e">System V Message based IPC </td><td class="v">Wez Furlong </td></tr>
<tr><td class="e">System V Semaphores </td><td class="v">Tom May </td></tr>
<tr><td class="e">System V Shared Memory </td><td class="v">Christian Cartus </td></tr>
<tr><td class="e">tidy </td><td class="v">John Coggeshall, Ilia Alshanetsky </td></tr>
<tr><td class="e">tokenizer </td><td class="v">Andrei Zmievski </td></tr>
<tr><td class="e">WDDX </td><td class="v">Andrei Zmievski </td></tr>
<tr><td class="e">XMLReader </td><td class="v">Rob Richards </td></tr>
<tr><td class="e">xmlrpc </td><td class="v">Dan Libby </td></tr>
<tr><td class="e">XML </td><td class="v">Stig Bakken, Thies C. Arntzen, Sterling Hughes </td></tr>
<tr><td class="e">XMLWriter </td><td class="v">Rob Richards, Pierre-Alain Joye </td></tr>
<tr><td class="e">XSL </td><td class="v">Christian Stocker, Rob Richards </td></tr>
<tr><td class="e">Zip </td><td class="v">Pierre-Alain Joye </td></tr>
<tr><td class="e">Zlib </td><td class="v">Rasmus Lerdorf, Stefan Roehrich, Zeev Suraski, Jade Nicoletti </td></tr>
</table><br />
<table border="0" cellpadding="3" width="600">
<tr class="h"><th colspan="2">PHP Documentation</th></tr>
<tr><td class="e">Authors </td><td class="v">Mehdi Achour, Friedhelm Betz, Antony Dovgal, Nuno Lopes, Philip Olson, Georg Richter, Damien Seguy, Jakub Vrana </td></tr>
<tr><td class="e">Editor </td><td class="v">Philip Olson </td></tr>
<tr><td class="e">User Note Maintainers </td><td class="v">Mehdi Achour, Friedhelm Betz, Vincent Gevers, Aidan Lister, Nuno Lopes, Tom Sommer </td></tr>
<tr><td class="e">Other Contributors </td><td class="v">Previously active authors, editors and other contributors are listed in the manual. </td></tr>
</table><br />
<table border="0" cellpadding="3" width="600">
<tr class="h"><th>PHP Quality Assurance Team</th></tr>
<tr><td class="e">Ilia Alshanetsky, Joerg Behrens, Antony Dovgal, Stefan Esser, Moriyoshi Koizumi, Magnus Maatta, Sebastian Nohn, Derick Rethans, Melvyn Sopacua, Jani Taskinen </td></tr>
</table><br />
<table border="0" cellpadding="3" width="600">
<tr class="h"><th>PHP Website Team</th></tr>
<tr><td class="e">Hannes Magnusson, Colin Viebrock, Jim Winstead </td></tr>
</table><br />
</div></body></html>
GET http://192.168.52.147/bWAPP/?=PHPE9568F36-D428-11d2-A769-00AA001ACF42 HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 200 OK
content-length: 3810
x-powered-by: PHP/5.2.4-2ubuntu5
keep-alive: timeout=15, max=98
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:35 GMT
content-type: image/gif

GIF89axCkrjq???jpiojoin///#$(___X]tz}&&)hlimffhl-.:oooflOOO()1\b55?zzhk23C--4EHh==J;>VgjkkIMqfg68Lag##&ݑgiNRzLL_\\uiigi@C_rrllTTjfh00=*rrSXy~敕Ȓō77CDž||nsX[V\W\UV}v{yz|RV''.ccEEUaeKKksyekRTeff59YEGemt99L]cuu>?VTTzOOrpu::GjjLLeBGo}VXlpdi55F_a:<QRU}pvRRjruÆoono]]MOtswgl<@dbb((/33?EE_INz66:
lrelXXjlV[TTtVVZ[[{mmuhhVVsZ\lQSzgjFFcy~IJ^mmsssjj;?bCE`fixxDDZYYs34Oqq!#7OOh^_VYppPQv?AZfg|~HHbHJdppz}12@NNnww}~MQw}~88Hvx.1M\`AAQ13BPRoioJMkmouxABZhh{nq!,xCH*\ȰÇ#JHŋ3jѢ+htIҠT2(KzpAE8S	&EXRĆ,(@AGʝkc0`CȋB>$g:\8K#ҷpX:CqV8AD[۹=⎠AǧQfGEw
;<HK|bvC
 6\2DO:cɎ1Dpxs
F+}pTc#2X FADo^@z8|ۃ-lC:`է@&ID=dHA!2,3A.R%"s8b3L!@py@p"1'
xQhhތD(P\`G}\ChkЁ'KC#Z"@0@
&92`b\HB<'( B~2A&$ ^`@Hg9*l7iBRb摥@t^*3,{04XQjQ=+XF.9ι4A
LK
lPl峫0Ŵ.@<~—~@D`@&0^'D?dAº6@
 g&kpC-@Dg kQ)m1$DK-Q1sc<5$M\$ANK>e@
z;FY
%ptr@8fPP1CB

YL9$P,q&VQ
JE}"א?PȲR30C9J}@V@įn0ЂsQg;#%$D%w?9
q@P]G@ 
:`67oiZʂ0:
nd8,0@DB^$Pt!j:8
 !ARY G
E]UJDY@+( :'1҉д	@*];@F‘p>PH JP[b> %[@@5̓pաun.P22DWL*>8C@#ġ
JY8&2_ALdUWg
Ga|еPޠ9|@-OQ@B@I W@`Y
Gc!bN,@[\ 9d &@@Zdyʢ	Ç=+\	0p$%Q`-E :^,Y
xzH`	0Su+\%
Hfg8M(
Ù&s08eQBe	<(Mp(g@S-lV`]Pa /P>s4uH "9
x)B%SPl#R	gTJܓGi^h5	axYh25V^;
?v
B&@wP짅{b
L
T@-@j0hg&h@<ru3&tI &0˩we4FvU9u͑rޔb؀ Zq@dhO,].HxU1rTQW\[z4D/(
VPB`hēat9*kWu_H aG H+ 0~Y)8Zm4f~ĬCQ!RT*c‘eH?"b?#f:Շ;}!$*<
l4l5뙁M> fNZ)7`R)4d}mp
lV:	<1%C"2$JSU{́kYUhq`p22Ye	MxnP\<(vJ~axD"=hoGC
P9V*	H+HDOx쪶U%&d=@⪆ |5lJAig	
~ 0z42>+GKl&$	ԹP#.)l@g>$z~GĂX,X{B\Pa~^Yi؊Oos`.J`'(M UtC~}'#6<fz1GL''\wSKL y;~J=`,J2pY#%&̳s:ؓ}(2@k
 p03#q".W9 bK	AHZĢƠ:4k!}
7`#@
o1U`ReJ{ 8->~@`8P1	rFKhWk8/
0.%o! % Cp8QhQ] 2(9׆28-
z	PTP g
80D0|%bQp}+0''`(?R@	!@ZD@ 	r{'!.AUL(@p	|	3PP-!?lg0 	>aC;AK4p+P	|rgݠ:/ H> 	>F1
PIpv_
bF
7 R2`GP/`qT}	ٗMw

T>PЙ9);

Powered-by header

INFO

Summary

The x-powered-by header for the target HTTP server is "PHP/5.2.4-2ubuntu5". This information was found in the request with id 50.

HTTP proof

GET http://192.168.52.147/bWAPP/ HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 302 Found
content-length: 0
x-powered-by: PHP/5.2.4-2ubuntu5
keep-alive: timeout=15, max=100
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
location: portal.php
date: Sun, 11 Mar 2018 06:47:31 GMT
content-type: text/html

Apache Server version

INFO

Summary

The web server has the apache server status module enabled which discloses the following remote server version: "Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g". This information was found in the request with id 37.

HTTP proof

GET http://192.168.52.147/server-status HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 200 OK
content-length: 5904
keep-alive: timeout=15, max=99
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:35 GMT
content-type: text/html; charset=ISO-8859-1

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">
<html><head>
<title>Apache Status</title>
</head><body>
<h1>Apache Server Status for 192.168.52.147</h1>

<dl><dt>Server Version: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g</dt>
<dt>Server Built: Mar  8 2013 17:04:27
</dt></dl><hr /><dl>
<dt>Current Time: Sunday, 11-Mar-2018 07:47:35 CET</dt>
<dt>Restart Time: Sunday, 11-Mar-2018 07:29:33 CET</dt>
<dt>Parent Server Generation: 0</dt>
<dt>Server uptime:  18 minutes 1 second</dt>
<dt>Total accesses: 41 - Total Traffic: 30 kB</dt>
<dt>CPU Usage: u.01 s.01 cu0 cs0 - .00185% CPU load</dt>
<dt>.0379 requests/sec - 28 B/second - 749 B/request</dt>
<dt>10 requests currently being processed, 3 idle workers</dt>
</dl><pre>KKKKKKWKKK___...................................................
................................................................
................................................................
................................................................
</pre>
<p>Scoreboard Key:<br />
"<b><code>_</code></b>" Waiting for Connection, 
"<b><code>S</code></b>" Starting up, 
"<b><code>R</code></b>" Reading Request,<br />
"<b><code>W</code></b>" Sending Reply, 
"<b><code>K</code></b>" Keepalive (read), 
"<b><code>D</code></b>" DNS Lookup,<br />
"<b><code>C</code></b>" Closing connection, 
"<b><code>L</code></b>" Logging, 
"<b><code>G</code></b>" Gracefully finishing,<br /> 
"<b><code>I</code></b>" Idle cleanup of worker, 
"<b><code>.</code></b>" Open slot with no current process</p>
<p />


<table border="0"><tr><th>Srv</th><th>PID</th><th>Acc</th><th>M</th><th>CPU
</th><th>SS</th><th>Req</th><th>Conn</th><th>Child</th><th>Slot</th><th>Client</th><th>VHost</th><th>Request</th></tr>

<tr><td><b>0-0</b></td><td>6908</td><td>2/5/5</td><td><b>K</b>
</td><td>0.01</td><td>0</td><td>0</td><td>0.4</td><td>0.00</td><td>0.00
</td><td>192.168.52.144</td><td nowrap>bee-box</td><td nowrap>GET /bWAPP/ HTTP/1.1</td></tr>

<tr><td><b>1-0</b></td><td>6909</td><td>21/21/21</td><td><b>K</b>
</td><td>0.01</td><td>0</td><td>0</td><td>1.0</td><td>0.00</td><td>0.00
</td><td>192.168.52.144</td><td nowrap>bee-box</td><td nowrap>TRACE /bWAPP/ HTTP/1.1</td></tr>

<tr><td><b>2-0</b></td><td>6910</td><td>3/3/3</td><td><b>K</b>
</td><td>0.00</td><td>0</td><td>1</td><td>13.6</td><td>0.01</td><td>0.01
</td><td>192.168.52.144</td><td nowrap>bee-box</td><td nowrap>GET /bWAPP/?=PHPB8B5F2A0-3C92-11d3-A3A9-4C7B08C10000 HTTP/1.1</td></tr>

<tr><td><b>3-0</b></td><td>6911</td><td>3/3/3</td><td><b>K</b>
</td><td>0.00</td><td>0</td><td>1</td><td>3.2</td><td>0.00</td><td>0.00
</td><td>192.168.52.144</td><td nowrap>bee-box</td><td nowrap>GET /bWAPP/?=PHPE9568F34-D428-11d2-A769-00AA001ACF42 HTTP/1.1</td></tr>

<tr><td><b>4-0</b></td><td>6912</td><td>3/3/3</td><td><b>K</b>
</td><td>0.00</td><td>0</td><td>1</td><td>4.5</td><td>0.00</td><td>0.00
</td><td>192.168.52.144</td><td nowrap>bee-box</td><td nowrap>GET /bWAPP/?=PHPE9568F36-D428-11d2-A769-00AA001ACF42 HTTP/1.1</td></tr>

<tr><td><b>5-0</b></td><td>7447</td><td>2/2/2</td><td><b>K</b>
</td><td>0.00</td><td>0</td><td>2</td><td>2.5</td><td>0.00</td><td>0.00
</td><td>192.168.52.144</td><td nowrap>bee-box</td><td nowrap>GET /bWAPP/?=PHPE9568F35-D428-11d2-A769-00AA001ACF42 HTTP/1.1</td></tr>

<tr><td><b>6-0</b></td><td>7540</td><td>1/1/1</td><td><b>W</b>
</td><td>0.00</td><td>0</td><td>0</td><td>0.4</td><td>0.00</td><td>0.00
</td><td>192.168.52.144</td><td nowrap>bee-box</td><td nowrap>GET /server-status HTTP/1.1</td></tr>

<tr><td><b>7-0</b></td><td>7542</td><td>1/1/1</td><td><b>K</b>
</td><td>0.00</td><td>1</td><td>0</td><td>0.4</td><td>0.00</td><td>0.00
</td><td>192.168.52.144</td><td nowrap>bee-box</td><td nowrap>GET /bWAPP/mV24XeGo.xhtml HTTP/1.1</td></tr>

<tr><td><b>8-0</b></td><td>7543</td><td>1/1/1</td><td><b>K</b>
</td><td>0.00</td><td>1</td><td>0</td><td>0.4</td><td>0.00</td><td>0.00
</td><td>192.168.52.144</td><td nowrap>bee-box</td><td nowrap>GET /bWAPP/pxoGQTFd.php HTTP/1.1</td></tr>

<tr><td><b>9-0</b></td><td>7544</td><td>1/1/1</td><td><b>K</b>
</td><td>0.00</td><td>0</td><td>0</td><td>0.4</td><td>0.00</td><td>0.00
</td><td>192.168.52.144</td><td nowrap>bee-box</td><td nowrap>GET /bWAPP/ke2UTFEV.aspx HTTP/1.1</td></tr>

</table>
 <hr /> <table>
 <tr><th>Srv</th><td>Child Server number - generation</td></tr>
 <tr><th>PID</th><td>OS process ID</td></tr>
 <tr><th>Acc</th><td>Number of accesses this connection / this child / this slot</td></tr>
 <tr><th>M</th><td>Mode of operation</td></tr>
<tr><th>CPU</th><td>CPU usage, number of seconds</td></tr>
<tr><th>SS</th><td>Seconds since beginning of most recent request</td></tr>
 <tr><th>Req</th><td>Milliseconds required to process most recent request</td></tr>
 <tr><th>Conn</th><td>Kilobytes transferred this connection</td></tr>
 <tr><th>Child</th><td>Megabytes transferred this child</td></tr>
 <tr><th>Slot</th><td>Total megabytes transferred this slot</td></tr>
 </table>
<hr>
<table cellspacing=0 cellpadding=0>
<tr><td bgcolor="#000000">
<b><font color="#ffffff" face="Arial,Helvetica">SSL/TLS Session Cache Status:</font></b>
</td></tr>
<tr><td bgcolor="#ffffff">
cache type: <b>SHMCB</b>, shared memory: <b>512000</b> bytes, current sessions: <b>0</b><br>sub-caches: <b>32</b>, indexes per sub-cache: <b>133</b><br>index usage: <b>0%</b>, cache usage: <b>0%</b><br>total sessions stored since starting: <b>0</b><br>total sessions expired since starting: <b>0</b><br>total (pre-expiry) sessions scrolled out of the cache: <b>0</b><br>total retrieves since starting: <b>0</b> hit, <b>0</b> miss<br>total removes since starting: <b>0</b> hit, <b>0</b> miss<br></td></tr>
</table>
<hr />
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>

Shared hosting

MEDIUM

Summary

The web application under test seems to be in a shared hosting. This vulnerability was found in the request with id 37.

HTTP proof

GET http://192.168.52.147/server-status HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 200 OK
content-length: 5904
keep-alive: timeout=15, max=99
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:35 GMT
content-type: text/html; charset=ISO-8859-1

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">
<html><head>
<title>Apache Status</title>
</head><body>
<h1>Apache Server Status for 192.168.52.147</h1>

<dl><dt>Server Version: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g</dt>
<dt>Server Built: Mar  8 2013 17:04:27
</dt></dl><hr /><dl>
<dt>Current Time: Sunday, 11-Mar-2018 07:47:35 CET</dt>
<dt>Restart Time: Sunday, 11-Mar-2018 07:29:33 CET</dt>
<dt>Parent Server Generation: 0</dt>
<dt>Server uptime:  18 minutes 1 second</dt>
<dt>Total accesses: 41 - Total Traffic: 30 kB</dt>
<dt>CPU Usage: u.01 s.01 cu0 cs0 - .00185% CPU load</dt>
<dt>.0379 requests/sec - 28 B/second - 749 B/request</dt>
<dt>10 requests currently being processed, 3 idle workers</dt>
</dl><pre>KKKKKKWKKK___...................................................
................................................................
................................................................
................................................................
</pre>
<p>Scoreboard Key:<br />
"<b><code>_</code></b>" Waiting for Connection, 
"<b><code>S</code></b>" Starting up, 
"<b><code>R</code></b>" Reading Request,<br />
"<b><code>W</code></b>" Sending Reply, 
"<b><code>K</code></b>" Keepalive (read), 
"<b><code>D</code></b>" DNS Lookup,<br />
"<b><code>C</code></b>" Closing connection, 
"<b><code>L</code></b>" Logging, 
"<b><code>G</code></b>" Gracefully finishing,<br /> 
"<b><code>I</code></b>" Idle cleanup of worker, 
"<b><code>.</code></b>" Open slot with no current process</p>
<p />


<table border="0"><tr><th>Srv</th><th>PID</th><th>Acc</th><th>M</th><th>CPU
</th><th>SS</th><th>Req</th><th>Conn</th><th>Child</th><th>Slot</th><th>Client</th><th>VHost</th><th>Request</th></tr>

<tr><td><b>0-0</b></td><td>6908</td><td>2/5/5</td><td><b>K</b>
</td><td>0.01</td><td>0</td><td>0</td><td>0.4</td><td>0.00</td><td>0.00
</td><td>192.168.52.144</td><td nowrap>bee-box</td><td nowrap>GET /bWAPP/ HTTP/1.1</td></tr>

<tr><td><b>1-0</b></td><td>6909</td><td>21/21/21</td><td><b>K</b>
</td><td>0.01</td><td>0</td><td>0</td><td>1.0</td><td>0.00</td><td>0.00
</td><td>192.168.52.144</td><td nowrap>bee-box</td><td nowrap>TRACE /bWAPP/ HTTP/1.1</td></tr>

<tr><td><b>2-0</b></td><td>6910</td><td>3/3/3</td><td><b>K</b>
</td><td>0.00</td><td>0</td><td>1</td><td>13.6</td><td>0.01</td><td>0.01
</td><td>192.168.52.144</td><td nowrap>bee-box</td><td nowrap>GET /bWAPP/?=PHPB8B5F2A0-3C92-11d3-A3A9-4C7B08C10000 HTTP/1.1</td></tr>

<tr><td><b>3-0</b></td><td>6911</td><td>3/3/3</td><td><b>K</b>
</td><td>0.00</td><td>0</td><td>1</td><td>3.2</td><td>0.00</td><td>0.00
</td><td>192.168.52.144</td><td nowrap>bee-box</td><td nowrap>GET /bWAPP/?=PHPE9568F34-D428-11d2-A769-00AA001ACF42 HTTP/1.1</td></tr>

<tr><td><b>4-0</b></td><td>6912</td><td>3/3/3</td><td><b>K</b>
</td><td>0.00</td><td>0</td><td>1</td><td>4.5</td><td>0.00</td><td>0.00
</td><td>192.168.52.144</td><td nowrap>bee-box</td><td nowrap>GET /bWAPP/?=PHPE9568F36-D428-11d2-A769-00AA001ACF42 HTTP/1.1</td></tr>

<tr><td><b>5-0</b></td><td>7447</td><td>2/2/2</td><td><b>K</b>
</td><td>0.00</td><td>0</td><td>2</td><td>2.5</td><td>0.00</td><td>0.00
</td><td>192.168.52.144</td><td nowrap>bee-box</td><td nowrap>GET /bWAPP/?=PHPE9568F35-D428-11d2-A769-00AA001ACF42 HTTP/1.1</td></tr>

<tr><td><b>6-0</b></td><td>7540</td><td>1/1/1</td><td><b>W</b>
</td><td>0.00</td><td>0</td><td>0</td><td>0.4</td><td>0.00</td><td>0.00
</td><td>192.168.52.144</td><td nowrap>bee-box</td><td nowrap>GET /server-status HTTP/1.1</td></tr>

<tr><td><b>7-0</b></td><td>7542</td><td>1/1/1</td><td><b>K</b>
</td><td>0.00</td><td>1</td><td>0</td><td>0.4</td><td>0.00</td><td>0.00
</td><td>192.168.52.144</td><td nowrap>bee-box</td><td nowrap>GET /bWAPP/mV24XeGo.xhtml HTTP/1.1</td></tr>

<tr><td><b>8-0</b></td><td>7543</td><td>1/1/1</td><td><b>K</b>
</td><td>0.00</td><td>1</td><td>0</td><td>0.4</td><td>0.00</td><td>0.00
</td><td>192.168.52.144</td><td nowrap>bee-box</td><td nowrap>GET /bWAPP/pxoGQTFd.php HTTP/1.1</td></tr>

<tr><td><b>9-0</b></td><td>7544</td><td>1/1/1</td><td><b>K</b>
</td><td>0.00</td><td>0</td><td>0</td><td>0.4</td><td>0.00</td><td>0.00
</td><td>192.168.52.144</td><td nowrap>bee-box</td><td nowrap>GET /bWAPP/ke2UTFEV.aspx HTTP/1.1</td></tr>

</table>
 <hr /> <table>
 <tr><th>Srv</th><td>Child Server number - generation</td></tr>
 <tr><th>PID</th><td>OS process ID</td></tr>
 <tr><th>Acc</th><td>Number of accesses this connection / this child / this slot</td></tr>
 <tr><th>M</th><td>Mode of operation</td></tr>
<tr><th>CPU</th><td>CPU usage, number of seconds</td></tr>
<tr><th>SS</th><td>Seconds since beginning of most recent request</td></tr>
 <tr><th>Req</th><td>Milliseconds required to process most recent request</td></tr>
 <tr><th>Conn</th><td>Kilobytes transferred this connection</td></tr>
 <tr><th>Child</th><td>Megabytes transferred this child</td></tr>
 <tr><th>Slot</th><td>Total megabytes transferred this slot</td></tr>
 </table>
<hr>
<table cellspacing=0 cellpadding=0>
<tr><td bgcolor="#000000">
<b><font color="#ffffff" face="Arial,Helvetica">SSL/TLS Session Cache Status:</font></b>
</td></tr>
<tr><td bgcolor="#ffffff">
cache type: <b>SHMCB</b>, shared memory: <b>512000</b> bytes, current sessions: <b>0</b><br>sub-caches: <b>32</b>, indexes per sub-cache: <b>133</b><br>index usage: <b>0%</b>, cache usage: <b>0%</b><br>total sessions stored since starting: <b>0</b><br>total sessions expired since starting: <b>0</b><br>total (pre-expiry) sessions scrolled out of the cache: <b>0</b><br>total retrieves since starting: <b>0</b> hit, <b>0</b> miss<br>total removes since starting: <b>0</b> hit, <b>0</b> miss<br></td></tr>
</table>
<hr />
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>

Potential web backdoor

HIGH

Summary

An HTTP response matching the web backdoor signature "NetworkFileManagerPHP" was found at: "http://192.168.52.147/bWAPP/NetworkFileManagerPHP.php"; this could indicate that the server has been compromised. This vulnerability was found in the request with id 103.


Description

If a server has been previously compromised, there is a high probability that the cyber-criminal has installed a backdoor so that they can easily return to the server if required. One method of achieving this is to place a web backdoor or web shell within the web root of the web server. This will then enable the cyber-criminal to access the server through a HTTP/S session.

Although extremely bad practice, it is possible that the web backdoor or web shell has been placed there by an administrator so they can perform administrative activities remotely.

During the initial recon stages of an attack, cyber-criminals will attempt to locate these web backdoors or shells by requesting the names of the most common and well known ones.

By analysing the response, they are able to determine if a web backdoor or web shell exists. These web backdoors or web shells can then provide an easy path for further compromise of the server.

By utilising the same methods as the cyber-criminals, the tool was able to discover a possible web backdoor or web shell.

Fix

If manual confirmation reveals that a web backdoor or web shell does exist on the server, then it should be removed. It is also recommended that an incident response investigation be conducted on the server to establish how the web backdoor or web shell came to end up on the server.

Depending on the environment, investigation into the compromise of any other services or servers should be conducted.

References

HTTP proof

GET http://192.168.52.147/bWAPP/NetworkFileManagerPHP.php HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 399
keep-alive: timeout=15, max=96
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:35 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /bWAPP/NetworkFileManagerPHP.php was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>

Potential web backdoor

HIGH

Summary

An HTTP response matching the web backdoor signature "PHANTASMA" was found at: "http://192.168.52.147/bWAPP/PHANTASMA.php"; this could indicate that the server has been compromised. This vulnerability was found in the request with id 119.


Description

If a server has been previously compromised, there is a high probability that the cyber-criminal has installed a backdoor so that they can easily return to the server if required. One method of achieving this is to place a web backdoor or web shell within the web root of the web server. This will then enable the cyber-criminal to access the server through a HTTP/S session.

Although extremely bad practice, it is possible that the web backdoor or web shell has been placed there by an administrator so they can perform administrative activities remotely.

During the initial recon stages of an attack, cyber-criminals will attempt to locate these web backdoors or shells by requesting the names of the most common and well known ones.

By analysing the response, they are able to determine if a web backdoor or web shell exists. These web backdoors or web shells can then provide an easy path for further compromise of the server.

By utilising the same methods as the cyber-criminals, the tool was able to discover a possible web backdoor or web shell.

Fix

If manual confirmation reveals that a web backdoor or web shell does exist on the server, then it should be removed. It is also recommended that an incident response investigation be conducted on the server to establish how the web backdoor or web shell came to end up on the server.

Depending on the environment, investigation into the compromise of any other services or servers should be conducted.

References

HTTP proof

GET http://192.168.52.147/bWAPP/PHANTASMA.php HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 387
keep-alive: timeout=15, max=95
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:36 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /bWAPP/PHANTASMA.php was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>

Potential web backdoor

MEDIUM

Summary

An HTTP response matching the web backdoor signature "cmd.jsp" was found at: "http://192.168.52.147/bWAPP/cmd.jsp"; this could indicate that the server has been compromised. This vulnerability was found in the request with id 127.


Description

If a server has been previously compromised, there is a high probability that the cyber-criminal has installed a backdoor so that they can easily return to the server if required. One method of achieving this is to place a web backdoor or web shell within the web root of the web server. This will then enable the cyber-criminal to access the server through a HTTP/S session.

Although extremely bad practice, it is possible that the web backdoor or web shell has been placed there by an administrator so they can perform administrative activities remotely.

During the initial recon stages of an attack, cyber-criminals will attempt to locate these web backdoors or shells by requesting the names of the most common and well known ones.

By analysing the response, they are able to determine if a web backdoor or web shell exists. These web backdoors or web shells can then provide an easy path for further compromise of the server.

By utilising the same methods as the cyber-criminals, the tool was able to discover a possible web backdoor or web shell.

Fix

If manual confirmation reveals that a web backdoor or web shell does exist on the server, then it should be removed. It is also recommended that an incident response investigation be conducted on the server to establish how the web backdoor or web shell came to end up on the server.

Depending on the environment, investigation into the compromise of any other services or servers should be conducted.

References

HTTP proof

GET http://192.168.52.147/bWAPP/cmd.jsp HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 381
keep-alive: timeout=15, max=97
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:36 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /bWAPP/cmd.jsp was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>

Potential web backdoor

HIGH

Summary

An HTTP response matching the web backdoor signature "JspWebshell" was found at: "http://192.168.52.147/bWAPP/JspWebshell1.2.jsp"; this could indicate that the server has been compromised. This vulnerability was found in the request with id 131.


Description

If a server has been previously compromised, there is a high probability that the cyber-criminal has installed a backdoor so that they can easily return to the server if required. One method of achieving this is to place a web backdoor or web shell within the web root of the web server. This will then enable the cyber-criminal to access the server through a HTTP/S session.

Although extremely bad practice, it is possible that the web backdoor or web shell has been placed there by an administrator so they can perform administrative activities remotely.

During the initial recon stages of an attack, cyber-criminals will attempt to locate these web backdoors or shells by requesting the names of the most common and well known ones.

By analysing the response, they are able to determine if a web backdoor or web shell exists. These web backdoors or web shells can then provide an easy path for further compromise of the server.

By utilising the same methods as the cyber-criminals, the tool was able to discover a possible web backdoor or web shell.

Fix

If manual confirmation reveals that a web backdoor or web shell does exist on the server, then it should be removed. It is also recommended that an incident response investigation be conducted on the server to establish how the web backdoor or web shell came to end up on the server.

Depending on the environment, investigation into the compromise of any other services or servers should be conducted.

References

HTTP proof

GET http://192.168.52.147/bWAPP/JspWebshell1.2.jsp HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 392
keep-alive: timeout=15, max=97
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:36 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /bWAPP/JspWebshell1.2.jsp was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>

Potential web backdoor

HIGH

Summary

An HTTP response matching the web backdoor signature "JspWebshell" was found at: "http://192.168.52.147/bWAPP/JspWebshell.jspx"; this could indicate that the server has been compromised. This vulnerability was found in the request with id 132.


Description

If a server has been previously compromised, there is a high probability that the cyber-criminal has installed a backdoor so that they can easily return to the server if required. One method of achieving this is to place a web backdoor or web shell within the web root of the web server. This will then enable the cyber-criminal to access the server through a HTTP/S session.

Although extremely bad practice, it is possible that the web backdoor or web shell has been placed there by an administrator so they can perform administrative activities remotely.

During the initial recon stages of an attack, cyber-criminals will attempt to locate these web backdoors or shells by requesting the names of the most common and well known ones.

By analysing the response, they are able to determine if a web backdoor or web shell exists. These web backdoors or web shells can then provide an easy path for further compromise of the server.

By utilising the same methods as the cyber-criminals, the tool was able to discover a possible web backdoor or web shell.

Fix

If manual confirmation reveals that a web backdoor or web shell does exist on the server, then it should be removed. It is also recommended that an incident response investigation be conducted on the server to establish how the web backdoor or web shell came to end up on the server.

Depending on the environment, investigation into the compromise of any other services or servers should be conducted.

References

HTTP proof

GET http://192.168.52.147/bWAPP/JspWebshell.jspx HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 390
keep-alive: timeout=15, max=97
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:36 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /bWAPP/JspWebshell.jspx was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>

Potential web backdoor

MEDIUM

Summary

An HTTP response matching the web backdoor signature "cmd.jsp" was found at: "http://192.168.52.147/bWAPP/cmd.jspx"; this could indicate that the server has been compromised. This vulnerability was found in the request with id 159.


Description

If a server has been previously compromised, there is a high probability that the cyber-criminal has installed a backdoor so that they can easily return to the server if required. One method of achieving this is to place a web backdoor or web shell within the web root of the web server. This will then enable the cyber-criminal to access the server through a HTTP/S session.

Although extremely bad practice, it is possible that the web backdoor or web shell has been placed there by an administrator so they can perform administrative activities remotely.

During the initial recon stages of an attack, cyber-criminals will attempt to locate these web backdoors or shells by requesting the names of the most common and well known ones.

By analysing the response, they are able to determine if a web backdoor or web shell exists. These web backdoors or web shells can then provide an easy path for further compromise of the server.

By utilising the same methods as the cyber-criminals, the tool was able to discover a possible web backdoor or web shell.

Fix

If manual confirmation reveals that a web backdoor or web shell does exist on the server, then it should be removed. It is also recommended that an incident response investigation be conducted on the server to establish how the web backdoor or web shell came to end up on the server.

Depending on the environment, investigation into the compromise of any other services or servers should be conducted.

References

HTTP proof

GET http://192.168.52.147/bWAPP/cmd.jspx HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 382
keep-alive: timeout=15, max=92
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:36 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /bWAPP/cmd.jspx was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>

Potential web backdoor

HIGH

Summary

An HTTP response matching the web backdoor signature "JspWebshell" was found at: "http://192.168.52.147/bWAPP/JspWebshell1.2.jspx"; this could indicate that the server has been compromised. This vulnerability was found in the request with id 163.


Description

If a server has been previously compromised, there is a high probability that the cyber-criminal has installed a backdoor so that they can easily return to the server if required. One method of achieving this is to place a web backdoor or web shell within the web root of the web server. This will then enable the cyber-criminal to access the server through a HTTP/S session.

Although extremely bad practice, it is possible that the web backdoor or web shell has been placed there by an administrator so they can perform administrative activities remotely.

During the initial recon stages of an attack, cyber-criminals will attempt to locate these web backdoors or shells by requesting the names of the most common and well known ones.

By analysing the response, they are able to determine if a web backdoor or web shell exists. These web backdoors or web shells can then provide an easy path for further compromise of the server.

By utilising the same methods as the cyber-criminals, the tool was able to discover a possible web backdoor or web shell.

Fix

If manual confirmation reveals that a web backdoor or web shell does exist on the server, then it should be removed. It is also recommended that an incident response investigation be conducted on the server to establish how the web backdoor or web shell came to end up on the server.

Depending on the environment, investigation into the compromise of any other services or servers should be conducted.

References

HTTP proof

GET http://192.168.52.147/bWAPP/JspWebshell1.2.jspx HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 393
keep-alive: timeout=15, max=94
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:36 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /bWAPP/JspWebshell1.2.jspx was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>

Potential web backdoor

HIGH

Summary

An HTTP response matching the web backdoor signature "JspWebshell" was found at: "http://192.168.52.147/bWAPP/JspWebshell.jsp"; this could indicate that the server has been compromised. This vulnerability was found in the request with id 174.


Description

If a server has been previously compromised, there is a high probability that the cyber-criminal has installed a backdoor so that they can easily return to the server if required. One method of achieving this is to place a web backdoor or web shell within the web root of the web server. This will then enable the cyber-criminal to access the server through a HTTP/S session.

Although extremely bad practice, it is possible that the web backdoor or web shell has been placed there by an administrator so they can perform administrative activities remotely.

During the initial recon stages of an attack, cyber-criminals will attempt to locate these web backdoors or shells by requesting the names of the most common and well known ones.

By analysing the response, they are able to determine if a web backdoor or web shell exists. These web backdoors or web shells can then provide an easy path for further compromise of the server.

By utilising the same methods as the cyber-criminals, the tool was able to discover a possible web backdoor or web shell.

Fix

If manual confirmation reveals that a web backdoor or web shell does exist on the server, then it should be removed. It is also recommended that an incident response investigation be conducted on the server to establish how the web backdoor or web shell came to end up on the server.

Depending on the environment, investigation into the compromise of any other services or servers should be conducted.

References

HTTP proof

GET http://192.168.52.147/bWAPP/JspWebshell.jsp HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 389
keep-alive: timeout=15, max=91
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:36 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /bWAPP/JspWebshell.jsp was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>

Potential web backdoor

HIGH

Summary

An HTTP response matching the web backdoor signature "NetworkFileManagerPHP" was found at: "http://192.168.52.147/NetworkFileManagerPHP.php"; this could indicate that the server has been compromised. This vulnerability was found in the request with id 296.


Description

If a server has been previously compromised, there is a high probability that the cyber-criminal has installed a backdoor so that they can easily return to the server if required. One method of achieving this is to place a web backdoor or web shell within the web root of the web server. This will then enable the cyber-criminal to access the server through a HTTP/S session.

Although extremely bad practice, it is possible that the web backdoor or web shell has been placed there by an administrator so they can perform administrative activities remotely.

During the initial recon stages of an attack, cyber-criminals will attempt to locate these web backdoors or shells by requesting the names of the most common and well known ones.

By analysing the response, they are able to determine if a web backdoor or web shell exists. These web backdoors or web shells can then provide an easy path for further compromise of the server.

By utilising the same methods as the cyber-criminals, the tool was able to discover a possible web backdoor or web shell.

Fix

If manual confirmation reveals that a web backdoor or web shell does exist on the server, then it should be removed. It is also recommended that an incident response investigation be conducted on the server to establish how the web backdoor or web shell came to end up on the server.

Depending on the environment, investigation into the compromise of any other services or servers should be conducted.

References

HTTP proof

GET http://192.168.52.147/NetworkFileManagerPHP.php HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 393
keep-alive: timeout=15, max=86
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:37 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /NetworkFileManagerPHP.php was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>

Potential web backdoor

HIGH

Summary

An HTTP response matching the web backdoor signature "PHANTASMA" was found at: "http://192.168.52.147/PHANTASMA.php"; this could indicate that the server has been compromised. This vulnerability was found in the request with id 299.


Description

If a server has been previously compromised, there is a high probability that the cyber-criminal has installed a backdoor so that they can easily return to the server if required. One method of achieving this is to place a web backdoor or web shell within the web root of the web server. This will then enable the cyber-criminal to access the server through a HTTP/S session.

Although extremely bad practice, it is possible that the web backdoor or web shell has been placed there by an administrator so they can perform administrative activities remotely.

During the initial recon stages of an attack, cyber-criminals will attempt to locate these web backdoors or shells by requesting the names of the most common and well known ones.

By analysing the response, they are able to determine if a web backdoor or web shell exists. These web backdoors or web shells can then provide an easy path for further compromise of the server.

By utilising the same methods as the cyber-criminals, the tool was able to discover a possible web backdoor or web shell.

Fix

If manual confirmation reveals that a web backdoor or web shell does exist on the server, then it should be removed. It is also recommended that an incident response investigation be conducted on the server to establish how the web backdoor or web shell came to end up on the server.

Depending on the environment, investigation into the compromise of any other services or servers should be conducted.

References

HTTP proof

GET http://192.168.52.147/PHANTASMA.php HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 381
keep-alive: timeout=15, max=90
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:37 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /PHANTASMA.php was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>

Potential web backdoor

HIGH

Summary

An HTTP response matching the web backdoor signature "JspWebshell" was found at: "http://192.168.52.147/JspWebshell1.2.jsp"; this could indicate that the server has been compromised. This vulnerability was found in the request with id 330.


Description

If a server has been previously compromised, there is a high probability that the cyber-criminal has installed a backdoor so that they can easily return to the server if required. One method of achieving this is to place a web backdoor or web shell within the web root of the web server. This will then enable the cyber-criminal to access the server through a HTTP/S session.

Although extremely bad practice, it is possible that the web backdoor or web shell has been placed there by an administrator so they can perform administrative activities remotely.

During the initial recon stages of an attack, cyber-criminals will attempt to locate these web backdoors or shells by requesting the names of the most common and well known ones.

By analysing the response, they are able to determine if a web backdoor or web shell exists. These web backdoors or web shells can then provide an easy path for further compromise of the server.

By utilising the same methods as the cyber-criminals, the tool was able to discover a possible web backdoor or web shell.

Fix

If manual confirmation reveals that a web backdoor or web shell does exist on the server, then it should be removed. It is also recommended that an incident response investigation be conducted on the server to establish how the web backdoor or web shell came to end up on the server.

Depending on the environment, investigation into the compromise of any other services or servers should be conducted.

References

HTTP proof

GET http://192.168.52.147/JspWebshell1.2.jsp HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 386
keep-alive: timeout=15, max=90
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:38 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /JspWebshell1.2.jsp was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>

Potential web backdoor

MEDIUM

Summary

An HTTP response matching the web backdoor signature "cmd.jsp" was found at: "http://192.168.52.147/cmd.jsp"; this could indicate that the server has been compromised. This vulnerability was found in the request with id 332.


Description

If a server has been previously compromised, there is a high probability that the cyber-criminal has installed a backdoor so that they can easily return to the server if required. One method of achieving this is to place a web backdoor or web shell within the web root of the web server. This will then enable the cyber-criminal to access the server through a HTTP/S session.

Although extremely bad practice, it is possible that the web backdoor or web shell has been placed there by an administrator so they can perform administrative activities remotely.

During the initial recon stages of an attack, cyber-criminals will attempt to locate these web backdoors or shells by requesting the names of the most common and well known ones.

By analysing the response, they are able to determine if a web backdoor or web shell exists. These web backdoors or web shells can then provide an easy path for further compromise of the server.

By utilising the same methods as the cyber-criminals, the tool was able to discover a possible web backdoor or web shell.

Fix

If manual confirmation reveals that a web backdoor or web shell does exist on the server, then it should be removed. It is also recommended that an incident response investigation be conducted on the server to establish how the web backdoor or web shell came to end up on the server.

Depending on the environment, investigation into the compromise of any other services or servers should be conducted.

References

HTTP proof

GET http://192.168.52.147/cmd.jsp HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 375
keep-alive: timeout=15, max=75
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:38 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /cmd.jsp was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>

Potential web backdoor

HIGH

Summary

An HTTP response matching the web backdoor signature "JspWebshell" was found at: "http://192.168.52.147/JspWebshell.jspx"; this could indicate that the server has been compromised. This vulnerability was found in the request with id 334.


Description

If a server has been previously compromised, there is a high probability that the cyber-criminal has installed a backdoor so that they can easily return to the server if required. One method of achieving this is to place a web backdoor or web shell within the web root of the web server. This will then enable the cyber-criminal to access the server through a HTTP/S session.

Although extremely bad practice, it is possible that the web backdoor or web shell has been placed there by an administrator so they can perform administrative activities remotely.

During the initial recon stages of an attack, cyber-criminals will attempt to locate these web backdoors or shells by requesting the names of the most common and well known ones.

By analysing the response, they are able to determine if a web backdoor or web shell exists. These web backdoors or web shells can then provide an easy path for further compromise of the server.

By utilising the same methods as the cyber-criminals, the tool was able to discover a possible web backdoor or web shell.

Fix

If manual confirmation reveals that a web backdoor or web shell does exist on the server, then it should be removed. It is also recommended that an incident response investigation be conducted on the server to establish how the web backdoor or web shell came to end up on the server.

Depending on the environment, investigation into the compromise of any other services or servers should be conducted.

References

HTTP proof

GET http://192.168.52.147/JspWebshell.jspx HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 384
keep-alive: timeout=15, max=80
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:38 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /JspWebshell.jspx was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>

Potential web backdoor

MEDIUM

Summary

An HTTP response matching the web backdoor signature "cmd.jsp" was found at: "http://192.168.52.147/cmd.jspx"; this could indicate that the server has been compromised. This vulnerability was found in the request with id 356.


Description

If a server has been previously compromised, there is a high probability that the cyber-criminal has installed a backdoor so that they can easily return to the server if required. One method of achieving this is to place a web backdoor or web shell within the web root of the web server. This will then enable the cyber-criminal to access the server through a HTTP/S session.

Although extremely bad practice, it is possible that the web backdoor or web shell has been placed there by an administrator so they can perform administrative activities remotely.

During the initial recon stages of an attack, cyber-criminals will attempt to locate these web backdoors or shells by requesting the names of the most common and well known ones.

By analysing the response, they are able to determine if a web backdoor or web shell exists. These web backdoors or web shells can then provide an easy path for further compromise of the server.

By utilising the same methods as the cyber-criminals, the tool was able to discover a possible web backdoor or web shell.

Fix

If manual confirmation reveals that a web backdoor or web shell does exist on the server, then it should be removed. It is also recommended that an incident response investigation be conducted on the server to establish how the web backdoor or web shell came to end up on the server.

Depending on the environment, investigation into the compromise of any other services or servers should be conducted.

References

HTTP proof

GET http://192.168.52.147/cmd.jspx HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 376
keep-alive: timeout=15, max=73
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:38 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /cmd.jspx was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>

Potential web backdoor

HIGH

Summary

An HTTP response matching the web backdoor signature "JspWebshell" was found at: "http://192.168.52.147/JspWebshell1.2.jspx"; this could indicate that the server has been compromised. This vulnerability was found in the request with id 367.


Description

If a server has been previously compromised, there is a high probability that the cyber-criminal has installed a backdoor so that they can easily return to the server if required. One method of achieving this is to place a web backdoor or web shell within the web root of the web server. This will then enable the cyber-criminal to access the server through a HTTP/S session.

Although extremely bad practice, it is possible that the web backdoor or web shell has been placed there by an administrator so they can perform administrative activities remotely.

During the initial recon stages of an attack, cyber-criminals will attempt to locate these web backdoors or shells by requesting the names of the most common and well known ones.

By analysing the response, they are able to determine if a web backdoor or web shell exists. These web backdoors or web shells can then provide an easy path for further compromise of the server.

By utilising the same methods as the cyber-criminals, the tool was able to discover a possible web backdoor or web shell.

Fix

If manual confirmation reveals that a web backdoor or web shell does exist on the server, then it should be removed. It is also recommended that an incident response investigation be conducted on the server to establish how the web backdoor or web shell came to end up on the server.

Depending on the environment, investigation into the compromise of any other services or servers should be conducted.

References

HTTP proof

GET http://192.168.52.147/JspWebshell1.2.jspx HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 387
keep-alive: timeout=15, max=89
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:38 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /JspWebshell1.2.jspx was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>

Potential web backdoor

HIGH

Summary

An HTTP response matching the web backdoor signature "JspWebshell" was found at: "http://192.168.52.147/JspWebshell.jsp"; this could indicate that the server has been compromised. This vulnerability was found in the request with id 375.


Description

If a server has been previously compromised, there is a high probability that the cyber-criminal has installed a backdoor so that they can easily return to the server if required. One method of achieving this is to place a web backdoor or web shell within the web root of the web server. This will then enable the cyber-criminal to access the server through a HTTP/S session.

Although extremely bad practice, it is possible that the web backdoor or web shell has been placed there by an administrator so they can perform administrative activities remotely.

During the initial recon stages of an attack, cyber-criminals will attempt to locate these web backdoors or shells by requesting the names of the most common and well known ones.

By analysing the response, they are able to determine if a web backdoor or web shell exists. These web backdoors or web shells can then provide an easy path for further compromise of the server.

By utilising the same methods as the cyber-criminals, the tool was able to discover a possible web backdoor or web shell.

Fix

If manual confirmation reveals that a web backdoor or web shell does exist on the server, then it should be removed. It is also recommended that an incident response investigation be conducted on the server to establish how the web backdoor or web shell came to end up on the server.

Depending on the environment, investigation into the compromise of any other services or servers should be conducted.

References

HTTP proof

GET http://192.168.52.147/JspWebshell.jsp HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 383
keep-alive: timeout=15, max=75
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:38 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /JspWebshell.jsp was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>

Click-Jacking vulnerability

MEDIUM

Summary

The whole target has no protection (X-Frame-Options header) against Click-Jacking attacks. This vulnerability was found in the requests with ids 18, 37, 45 to 46, 51, 54 to 62, 64 to 75, 77 to 80, 82 to 100, 102 to 127, 129 to 145, 147, 149 to 151, 153 to 159, 161 to 168, 170 to 178, 180 to 193, 195 to 214, 216 to 219, 221 to 228, 231 to 239, 241, 243 to 246, 248 to 253, 255 to 261, 263 to 280, 282 to 285, 287 to 301, 303 to 307, 309 to 318, 320 to 322, 324 to 337, 339 to 340, 342 to 346, 348 to 356, 358 to 359, 361, 363 to 376, 378 to 379, 381 to 388, 390 to 401, 403 to 413, 415, 417 to 429, 431 to 432, 434 to 442, 448, 451, 457, 459, 474 to 477, 483, 487, 489 to 490, 504 to 507, 535 to 538.


Description

Clickjacking (User Interface redress attack, UI redress attack, UI redressing) is a malicious technique of tricking a Web user into clicking on something different from what the user perceives they are clicking on, thus potentially revealing confidential information or taking control of their computer while clicking on seemingly innocuous web pages.

The server didn't return an X-Frame-Options header which means that this website could be at risk of a clickjacking attack. The X-Frame-Options HTTP response header can be used to indicate whether or not a browser should be allowed to render a page inside a frame or iframe. Sites can use this to avoid clickjacking attacks, by ensuring that their content is not embedded into other sites.

Fix

Configure your web server to include an X-Frame-Options header.

References

HTTP proof

GET http://192.168.52.147/bWAPP/ HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 302 Found
content-length: 0
x-powered-by: PHP/5.2.4-2ubuntu5
keep-alive: timeout=15, max=100
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
location: portal.php
date: Sun, 11 Mar 2018 06:47:31 GMT
content-type: text/html
GET http://192.168.52.147/server-status HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 200 OK
content-length: 5904
keep-alive: timeout=15, max=99
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:35 GMT
content-type: text/html; charset=ISO-8859-1

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">
<html><head>
<title>Apache Status</title>
</head><body>
<h1>Apache Server Status for 192.168.52.147</h1>

<dl><dt>Server Version: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g</dt>
<dt>Server Built: Mar  8 2013 17:04:27
</dt></dl><hr /><dl>
<dt>Current Time: Sunday, 11-Mar-2018 07:47:35 CET</dt>
<dt>Restart Time: Sunday, 11-Mar-2018 07:29:33 CET</dt>
<dt>Parent Server Generation: 0</dt>
<dt>Server uptime:  18 minutes 1 second</dt>
<dt>Total accesses: 41 - Total Traffic: 30 kB</dt>
<dt>CPU Usage: u.01 s.01 cu0 cs0 - .00185% CPU load</dt>
<dt>.0379 requests/sec - 28 B/second - 749 B/request</dt>
<dt>10 requests currently being processed, 3 idle workers</dt>
</dl><pre>KKKKKKWKKK___...................................................
................................................................
................................................................
................................................................
</pre>
<p>Scoreboard Key:<br />
"<b><code>_</code></b>" Waiting for Connection, 
"<b><code>S</code></b>" Starting up, 
"<b><code>R</code></b>" Reading Request,<br />
"<b><code>W</code></b>" Sending Reply, 
"<b><code>K</code></b>" Keepalive (read), 
"<b><code>D</code></b>" DNS Lookup,<br />
"<b><code>C</code></b>" Closing connection, 
"<b><code>L</code></b>" Logging, 
"<b><code>G</code></b>" Gracefully finishing,<br /> 
"<b><code>I</code></b>" Idle cleanup of worker, 
"<b><code>.</code></b>" Open slot with no current process</p>
<p />


<table border="0"><tr><th>Srv</th><th>PID</th><th>Acc</th><th>M</th><th>CPU
</th><th>SS</th><th>Req</th><th>Conn</th><th>Child</th><th>Slot</th><th>Client</th><th>VHost</th><th>Request</th></tr>

<tr><td><b>0-0</b></td><td>6908</td><td>2/5/5</td><td><b>K</b>
</td><td>0.01</td><td>0</td><td>0</td><td>0.4</td><td>0.00</td><td>0.00
</td><td>192.168.52.144</td><td nowrap>bee-box</td><td nowrap>GET /bWAPP/ HTTP/1.1</td></tr>

<tr><td><b>1-0</b></td><td>6909</td><td>21/21/21</td><td><b>K</b>
</td><td>0.01</td><td>0</td><td>0</td><td>1.0</td><td>0.00</td><td>0.00
</td><td>192.168.52.144</td><td nowrap>bee-box</td><td nowrap>TRACE /bWAPP/ HTTP/1.1</td></tr>

<tr><td><b>2-0</b></td><td>6910</td><td>3/3/3</td><td><b>K</b>
</td><td>0.00</td><td>0</td><td>1</td><td>13.6</td><td>0.01</td><td>0.01
</td><td>192.168.52.144</td><td nowrap>bee-box</td><td nowrap>GET /bWAPP/?=PHPB8B5F2A0-3C92-11d3-A3A9-4C7B08C10000 HTTP/1.1</td></tr>

<tr><td><b>3-0</b></td><td>6911</td><td>3/3/3</td><td><b>K</b>
</td><td>0.00</td><td>0</td><td>1</td><td>3.2</td><td>0.00</td><td>0.00
</td><td>192.168.52.144</td><td nowrap>bee-box</td><td nowrap>GET /bWAPP/?=PHPE9568F34-D428-11d2-A769-00AA001ACF42 HTTP/1.1</td></tr>

<tr><td><b>4-0</b></td><td>6912</td><td>3/3/3</td><td><b>K</b>
</td><td>0.00</td><td>0</td><td>1</td><td>4.5</td><td>0.00</td><td>0.00
</td><td>192.168.52.144</td><td nowrap>bee-box</td><td nowrap>GET /bWAPP/?=PHPE9568F36-D428-11d2-A769-00AA001ACF42 HTTP/1.1</td></tr>

<tr><td><b>5-0</b></td><td>7447</td><td>2/2/2</td><td><b>K</b>
</td><td>0.00</td><td>0</td><td>2</td><td>2.5</td><td>0.00</td><td>0.00
</td><td>192.168.52.144</td><td nowrap>bee-box</td><td nowrap>GET /bWAPP/?=PHPE9568F35-D428-11d2-A769-00AA001ACF42 HTTP/1.1</td></tr>

<tr><td><b>6-0</b></td><td>7540</td><td>1/1/1</td><td><b>W</b>
</td><td>0.00</td><td>0</td><td>0</td><td>0.4</td><td>0.00</td><td>0.00
</td><td>192.168.52.144</td><td nowrap>bee-box</td><td nowrap>GET /server-status HTTP/1.1</td></tr>

<tr><td><b>7-0</b></td><td>7542</td><td>1/1/1</td><td><b>K</b>
</td><td>0.00</td><td>1</td><td>0</td><td>0.4</td><td>0.00</td><td>0.00
</td><td>192.168.52.144</td><td nowrap>bee-box</td><td nowrap>GET /bWAPP/mV24XeGo.xhtml HTTP/1.1</td></tr>

<tr><td><b>8-0</b></td><td>7543</td><td>1/1/1</td><td><b>K</b>
</td><td>0.00</td><td>1</td><td>0</td><td>0.4</td><td>0.00</td><td>0.00
</td><td>192.168.52.144</td><td nowrap>bee-box</td><td nowrap>GET /bWAPP/pxoGQTFd.php HTTP/1.1</td></tr>

<tr><td><b>9-0</b></td><td>7544</td><td>1/1/1</td><td><b>K</b>
</td><td>0.00</td><td>0</td><td>0</td><td>0.4</td><td>0.00</td><td>0.00
</td><td>192.168.52.144</td><td nowrap>bee-box</td><td nowrap>GET /bWAPP/ke2UTFEV.aspx HTTP/1.1</td></tr>

</table>
 <hr /> <table>
 <tr><th>Srv</th><td>Child Server number - generation</td></tr>
 <tr><th>PID</th><td>OS process ID</td></tr>
 <tr><th>Acc</th><td>Number of accesses this connection / this child / this slot</td></tr>
 <tr><th>M</th><td>Mode of operation</td></tr>
<tr><th>CPU</th><td>CPU usage, number of seconds</td></tr>
<tr><th>SS</th><td>Seconds since beginning of most recent request</td></tr>
 <tr><th>Req</th><td>Milliseconds required to process most recent request</td></tr>
 <tr><th>Conn</th><td>Kilobytes transferred this connection</td></tr>
 <tr><th>Child</th><td>Megabytes transferred this child</td></tr>
 <tr><th>Slot</th><td>Total megabytes transferred this slot</td></tr>
 </table>
<hr>
<table cellspacing=0 cellpadding=0>
<tr><td bgcolor="#000000">
<b><font color="#ffffff" face="Arial,Helvetica">SSL/TLS Session Cache Status:</font></b>
</td></tr>
<tr><td bgcolor="#ffffff">
cache type: <b>SHMCB</b>, shared memory: <b>512000</b> bytes, current sessions: <b>0</b><br>sub-caches: <b>32</b>, indexes per sub-cache: <b>133</b><br>index usage: <b>0%</b>, cache usage: <b>0%</b><br>total sessions stored since starting: <b>0</b><br>total sessions expired since starting: <b>0</b><br>total (pre-expiry) sessions scrolled out of the cache: <b>0</b><br>total retrieves since starting: <b>0</b> hit, <b>0</b> miss<br>total removes since starting: <b>0</b> hit, <b>0</b> miss<br></td></tr>
</table>
<hr />
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/bWAPP/.listing HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 382
keep-alive: timeout=15, max=99
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:35 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /bWAPP/.listing was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/sitemap.xml HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 379
keep-alive: timeout=15, max=99
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:35 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /sitemap.xml was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/.listing HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 376
keep-alive: timeout=15, max=78
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:35 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /.listing was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/bWAPP/php-backdoor.php HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 390
keep-alive: timeout=15, max=95
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:35 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /bWAPP/php-backdoor.php was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/bWAPP/backupsql.php HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 387
keep-alive: timeout=15, max=100
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:35 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /bWAPP/backupsql.php was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/bWAPP/matamu.php HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 384
keep-alive: timeout=15, max=97
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:35 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /bWAPP/matamu.php was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/bWAPP/phpshell.php HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 386
keep-alive: timeout=15, max=98
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:35 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /bWAPP/phpshell.php was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/bWAPP/ru24_post_sh.php HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 390
keep-alive: timeout=15, max=98
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:35 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /bWAPP/ru24_post_sh.php was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/bWAPP/mysql_tool.php HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 388
keep-alive: timeout=15, max=97
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:35 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /bWAPP/mysql_tool.php was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/bWAPP/ironshell.php HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 387
keep-alive: timeout=15, max=98
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:35 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /bWAPP/ironshell.php was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/bWAPP/r57_Mohajer22.php HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 391
keep-alive: timeout=15, max=100
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:35 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /bWAPP/r57_Mohajer22.php was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/bWAPP/nstview.php HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 385
keep-alive: timeout=15, max=100
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:35 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /bWAPP/nstview.php was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/bWAPP/ctt_sh.php HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 384
keep-alive: timeout=15, max=98
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:35 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /bWAPP/ctt_sh.php was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/bWAPP/c99_PSych0.php HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 388
keep-alive: timeout=15, max=98
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:35 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /bWAPP/c99_PSych0.php was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/bWAPP/ekin0x.php HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 384
keep-alive: timeout=15, max=100
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:35 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /bWAPP/ekin0x.php was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/bWAPP/c99.php HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 381
keep-alive: timeout=15, max=98
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:35 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /bWAPP/c99.php was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/bWAPP/r57.php HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 381
keep-alive: timeout=15, max=99
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:35 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /bWAPP/r57.php was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/bWAPP/locus.php HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 383
keep-alive: timeout=15, max=100
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:35 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /bWAPP/locus.php was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/bWAPP/simple_cmd.php HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 388
keep-alive: timeout=15, max=100
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:35 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /bWAPP/simple_cmd.php was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/bWAPP/c100.php HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 382
keep-alive: timeout=15, max=100
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:35 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /bWAPP/c100.php was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/bWAPP/spybypass.php HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 387
keep-alive: timeout=15, max=100
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:35 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /bWAPP/spybypass.php was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/bWAPP/PHPRemoteView.php HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 391
keep-alive: timeout=15, max=100
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:35 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /bWAPP/PHPRemoteView.php was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/bWAPP/myshell.php HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 385
keep-alive: timeout=15, max=94
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:35 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /bWAPP/myshell.php was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/bWAPP/NCC-Shell.php HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 387
keep-alive: timeout=15, max=96
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:35 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /bWAPP/NCC-Shell.php was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/bWAPP/simple-backdoor.php HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 393
keep-alive: timeout=15, max=96
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:35 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /bWAPP/simple-backdoor.php was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/bWAPP/gfs_sh.php HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 384
keep-alive: timeout=15, max=97
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:35 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /bWAPP/gfs_sh.php was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/bWAPP/c99_w4cking.php HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 389
keep-alive: timeout=15, max=76
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:35 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /bWAPP/c99_w4cking.php was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/bWAPP/zacosmall.php HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 387
keep-alive: timeout=15, max=97
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:35 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /bWAPP/zacosmall.php was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/bWAPP/lamashell.php HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 387
keep-alive: timeout=15, max=95
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:35 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /bWAPP/lamashell.php was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/bWAPP/liz0zim.php HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 385
keep-alive: timeout=15, max=97
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:35 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /bWAPP/liz0zim.php was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/bWAPP/nshell.php HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 384
keep-alive: timeout=15, max=93
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:35 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /bWAPP/nshell.php was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/bWAPP/c99_madnet.php HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 388
keep-alive: timeout=15, max=98
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:35 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /bWAPP/c99_madnet.php was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/bWAPP/cybershell.php HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 388
keep-alive: timeout=15, max=97
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:35 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /bWAPP/cybershell.php was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/bWAPP/safe0ver.php HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 386
keep-alive: timeout=15, max=99
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:35 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /bWAPP/safe0ver.php was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/bWAPP/pHpINJ.php HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 384
keep-alive: timeout=15, max=97
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:35 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /bWAPP/pHpINJ.php was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/bWAPP/c99shell.php HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 386
keep-alive: timeout=15, max=99
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:35 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /bWAPP/c99shell.php was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/bWAPP/accept_language.php HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 393
keep-alive: timeout=15, max=99
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:35 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /bWAPP/accept_language.php was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/bWAPP/c100shell.php HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 387
keep-alive: timeout=15, max=99
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:35 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /bWAPP/c100shell.php was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/bWAPP/r57_iFX.php HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 385
keep-alive: timeout=15, max=99
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:35 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /bWAPP/r57_iFX.php was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/bWAPP/phpbypass.php HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 387
keep-alive: timeout=15, max=99
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:35 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /bWAPP/phpbypass.php was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/bWAPP/Uploader.php HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 386
keep-alive: timeout=15, max=99
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:35 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /bWAPP/Uploader.php was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/bWAPP/mysql.php HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 383
keep-alive: timeout=15, max=99
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:35 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /bWAPP/mysql.php was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/bWAPP/cmd.php HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 381
keep-alive: timeout=15, max=75
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:35 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /bWAPP/cmd.php was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/bWAPP/iMHaPFtp.php HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 386
keep-alive: timeout=15, max=96
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:35 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /bWAPP/iMHaPFtp.php was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/bWAPP/pws.php HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 381
keep-alive: timeout=15, max=92
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:35 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /bWAPP/pws.php was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/bWAPP/Crystal.php HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 385
keep-alive: timeout=15, max=96
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:35 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /bWAPP/Crystal.php was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/bWAPP/Private-i3lue.php HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 391
keep-alive: timeout=15, max=95
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:35 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /bWAPP/Private-i3lue.php was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/bWAPP/erne.php HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 382
keep-alive: timeout=15, max=96
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:35 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /bWAPP/erne.php was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/bWAPP/NetworkFileManagerPHP.php HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 399
keep-alive: timeout=15, max=96
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:35 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /bWAPP/NetworkFileManagerPHP.php was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/bWAPP/load_shell.php HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 388
keep-alive: timeout=15, max=96
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:35 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /bWAPP/load_shell.php was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/bWAPP/stresbypass.php HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 389
keep-alive: timeout=15, max=96
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:35 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /bWAPP/stresbypass.php was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/bWAPP/c99_locus7s.php HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 389
keep-alive: timeout=15, max=97
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:35 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /bWAPP/c99_locus7s.php was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/bWAPP/Dx.php HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 380
keep-alive: timeout=15, max=98
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:35 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /bWAPP/Dx.php was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/bWAPP/heykir.php HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 384
keep-alive: timeout=15, max=98
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:35 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /bWAPP/heykir.php was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/bWAPP/PHPJackal.php HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 387
keep-alive: timeout=15, max=98
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:35 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /bWAPP/PHPJackal.php was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/bWAPP/locus7s.php HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 385
keep-alive: timeout=15, max=98
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:35 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /bWAPP/locus7s.php was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/bWAPP/rootshell.php HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 387
keep-alive: timeout=15, max=98
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:35 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /bWAPP/rootshell.php was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/bWAPP/r57_kartal.php HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 388
keep-alive: timeout=15, max=98
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:35 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /bWAPP/r57_kartal.php was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/bWAPP/sosyete.php HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 385
keep-alive: timeout=15, max=98
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:35 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /bWAPP/sosyete.php was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/bWAPP/php-include-w-shell.php HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 397
keep-alive: timeout=15, max=99
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:35 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /bWAPP/php-include-w-shell.php was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/bWAPP/fatal.php HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 383
keep-alive: timeout=15, max=74
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:35 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /bWAPP/fatal.php was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/bWAPP/winshell.php HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 386
keep-alive: timeout=15, max=95
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:36 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /bWAPP/winshell.php was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/bWAPP/safemod.php HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 385
keep-alive: timeout=15, max=91
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:36 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /bWAPP/safemod.php was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/bWAPP/jackal.php HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 384
keep-alive: timeout=15, max=93
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:36 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /bWAPP/jackal.php was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/bWAPP/PHANTASMA.php HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 387
keep-alive: timeout=15, max=95
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:36 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /bWAPP/PHANTASMA.php was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/bWAPP/x.php HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 379
keep-alive: timeout=15, max=94
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:36 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /bWAPP/x.php was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/bWAPP/w3k.php HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 381
keep-alive: timeout=15, max=95
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:36 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /bWAPP/w3k.php was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/bWAPP/cod3rz.php HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 384
keep-alive: timeout=15, max=95
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:36 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /bWAPP/cod3rz.php was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/bWAPP/l33t.php HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 382
keep-alive: timeout=15, max=95
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:36 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /bWAPP/l33t.php was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/bWAPP/cmd.pl HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 380
keep-alive: timeout=15, max=96
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:36 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /bWAPP/cmd.pl was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/bWAPP/jsback.php HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 384
keep-alive: timeout=15, max=73
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:36 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /bWAPP/jsback.php was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/bWAPP/simattacker.php HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 389
keep-alive: timeout=15, max=97
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:36 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /bWAPP/simattacker.php was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/bWAPP/cmd.jsp HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 381
keep-alive: timeout=15, max=97
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:36 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /bWAPP/cmd.jsp was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/bWAPP/shell.cgi HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 383
keep-alive: timeout=15, max=94
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:36 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /bWAPP/shell.cgi was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/bWAPP/owned.php HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 383
keep-alive: timeout=15, max=95
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:36 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /bWAPP/owned.php was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/bWAPP/JspWebshell1.2.jsp HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 392
keep-alive: timeout=15, max=97
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:36 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /bWAPP/JspWebshell1.2.jsp was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/bWAPP/JspWebshell.jspx HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 390
keep-alive: timeout=15, max=97
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:36 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /bWAPP/JspWebshell.jspx was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/bWAPP/dx.php HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 380
keep-alive: timeout=15, max=90
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:36 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /bWAPP/dx.php was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/bWAPP/browser.jsp HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 385
keep-alive: timeout=15, max=97
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:36 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /bWAPP/browser.jsp was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/bWAPP/cmdjsp.jspx HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 385
keep-alive: timeout=15, max=97
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:36 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /bWAPP/cmdjsp.jspx was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/bWAPP/mysql2.php HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 384
keep-alive: timeout=15, max=93
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:36 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /bWAPP/mysql2.php was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/bWAPP/unreal.php HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 384
keep-alive: timeout=15, max=92
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:36 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /bWAPP/unreal.php was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/bWAPP/h4x.php HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 381
keep-alive: timeout=15, max=94
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:36 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /bWAPP/h4x.php was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/bWAPP/dc.php HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 380
keep-alive: timeout=15, max=94
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:36 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /bWAPP/dc.php was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/bWAPP/cmdServlet HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 384
keep-alive: timeout=15, max=72
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:36 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /bWAPP/cmdServlet was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/bWAPP/remview.php HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 385
keep-alive: timeout=15, max=94
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:36 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /bWAPP/remview.php was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/bWAPP/xx.php HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 380
keep-alive: timeout=15, max=94
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:36 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /bWAPP/xx.php was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/bWAPP/cod3r.php HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 383
keep-alive: timeout=15, max=94
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:36 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /bWAPP/cod3r.php was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/bWAPP/avent.php HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 383
keep-alive: timeout=15, max=96
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:36 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /bWAPP/avent.php was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/bWAPP/shell.pl HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 382
keep-alive: timeout=15, max=95
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:36 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /bWAPP/shell.pl was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/bWAPP/worm.php HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 382
keep-alive: timeout=15, max=89
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:36 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /bWAPP/worm.php was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/bWAPP/jsp-reverse.jsp HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 389
keep-alive: timeout=15, max=91
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:36 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /bWAPP/jsp-reverse.jsp was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/bWAPP/locu.php HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 382
keep-alive: timeout=15, max=93
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:36 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /bWAPP/locu.php was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/bWAPP/goonshell.php HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 387
keep-alive: timeout=15, max=93
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:36 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /bWAPP/goonshell.php was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/bWAPP/cmd_win32.jsp HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 387
keep-alive: timeout=15, max=93
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:36 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /bWAPP/cmd_win32.jsp was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/bWAPP/0wn3d.php HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 383
keep-alive: timeout=15, max=71
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:36 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /bWAPP/0wn3d.php was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/bWAPP/sql.php HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 381
keep-alive: timeout=15, max=88
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:36 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /bWAPP/sql.php was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/bWAPP/shell.jsp HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 383
keep-alive: timeout=15, max=91
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:36 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /bWAPP/shell.jsp was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/bWAPP/h4x0r.php HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 383
keep-alive: timeout=15, max=90
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:36 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /bWAPP/h4x0r.php was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/bWAPP/w4k.php HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 381
keep-alive: timeout=15, max=93
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:36 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /bWAPP/w4k.php was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/bWAPP/cmd.jspx HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 382
keep-alive: timeout=15, max=92
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:36 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /bWAPP/cmd.jspx was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/bWAPP/w4cking.php HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 385
keep-alive: timeout=15, max=95
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:36 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /bWAPP/w4cking.php was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/bWAPP/xxx.php HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 381
keep-alive: timeout=15, max=92
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:36 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /bWAPP/xxx.php was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/bWAPP/JspWebshell1.2.jspx HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 393
keep-alive: timeout=15, max=94
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:36 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /bWAPP/JspWebshell1.2.jspx was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/bWAPP/zaco.php HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 382
keep-alive: timeout=15, max=96
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:36 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /bWAPP/zaco.php was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/bWAPP/servlet/CmdServlet HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 392
keep-alive: timeout=15, max=96
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:36 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /bWAPP/servlet/CmdServlet was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/bWAPP/cod3rzshell.php HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 389
keep-alive: timeout=15, max=92
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:36 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /bWAPP/cod3rzshell.php was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/bWAPP/ListServlet HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 385
keep-alive: timeout=15, max=92
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:36 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /bWAPP/ListServlet was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/bWAPP/cmd.cgi HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 381
keep-alive: timeout=15, max=96
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:36 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /bWAPP/cmd.cgi was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/bWAPP/cmdjsp.jsp HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 384
keep-alive: timeout=15, max=92
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:36 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /bWAPP/cmdjsp.jsp was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/bWAPP/simp-worm_sys.p5.php HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 394
keep-alive: timeout=15, max=96
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:36 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /bWAPP/simp-worm_sys.p5.php was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/bWAPP/cmd.asp HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 381
keep-alive: timeout=15, max=70
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:36 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /bWAPP/cmd.asp was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/bWAPP/cmd-asp-5.1.asp HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 389
keep-alive: timeout=15, max=87
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:36 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /bWAPP/cmd-asp-5.1.asp was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/bWAPP/JspWebshell.jsp HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 389
keep-alive: timeout=15, max=91
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:36 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /bWAPP/JspWebshell.jsp was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/bWAPP/CmdServlet HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 384
keep-alive: timeout=15, max=90
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:36 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /bWAPP/CmdServlet was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/bWAPP/jsp-reverse.jspx HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 390
keep-alive: timeout=15, max=91
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:36 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /bWAPP/jsp-reverse.jspx was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/bWAPP/ntdaddy.aspx HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 386
keep-alive: timeout=15, max=89
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:36 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /bWAPP/ntdaddy.aspx was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/bWAPP/shell.asp HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 383
keep-alive: timeout=15, max=91
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:36 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /bWAPP/shell.asp was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/bWAPP/perlcmd.cgi HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 385
keep-alive: timeout=15, max=91
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:36 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /bWAPP/perlcmd.cgi was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/bWAPP/nst.php HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 381
keep-alive: timeout=15, max=86
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:36 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /bWAPP/nst.php was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/bWAPP/fso.asp HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 381
keep-alive: timeout=15, max=91
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:36 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /bWAPP/fso.asp was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/bWAPP/servlet/cmdServlet HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 392
keep-alive: timeout=15, max=90
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:36 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /bWAPP/servlet/cmdServlet was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/bWAPP/rhtools.aspx HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 386
keep-alive: timeout=15, max=92
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:36 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /bWAPP/rhtools.aspx was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/bWAPP/zehir4.mspx HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 385
keep-alive: timeout=15, max=93
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:36 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /bWAPP/zehir4.mspx was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/bWAPP/kshell.asp HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 384
keep-alive: timeout=15, max=89
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:36 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /bWAPP/kshell.asp was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/bWAPP/UpServlet HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 383
keep-alive: timeout=15, max=90
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:36 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /bWAPP/UpServlet was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/bWAPP/cmdasp.aspx HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 385
keep-alive: timeout=15, max=90
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:36 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /bWAPP/cmdasp.aspx was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/bWAPP/cmd_win32.jspx HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 388
keep-alive: timeout=15, max=68
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:36 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /bWAPP/cmd_win32.jspx was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/bWAPP/kshell.mspx HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 385
keep-alive: timeout=15, max=90
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:36 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /bWAPP/kshell.mspx was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/bWAPP/kshell.aspx HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 385
keep-alive: timeout=15, max=88
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:36 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /bWAPP/kshell.aspx was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/bWAPP/cmd.cfm HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 381
keep-alive: timeout=15, max=89
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:36 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /bWAPP/cmd.cfm was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/bWAPP/cmd.aspx HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 382
keep-alive: timeout=15, max=91
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:36 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /bWAPP/cmd.aspx was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/bWAPP/shell.jspx HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 384
keep-alive: timeout=15, max=85
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:36 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /bWAPP/shell.jspx was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/bWAPP/shell.do HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 382
keep-alive: timeout=15, max=90
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:36 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /bWAPP/shell.do was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/bWAPP/cmd.do HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 380
keep-alive: timeout=15, max=92
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:36 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /bWAPP/cmd.do was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/bWAPP/ntdaddy.mspx HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 386
keep-alive: timeout=15, max=95
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:36 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /bWAPP/ntdaddy.mspx was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/bWAPP/zehir4.asp HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 384
keep-alive: timeout=15, max=94
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:36 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /bWAPP/zehir4.asp was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/bWAPP/shell.GPL HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 383
keep-alive: timeout=15, max=88
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:36 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /bWAPP/shell.GPL was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/bWAPP/cmd.GPL HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 381
keep-alive: timeout=15, max=67
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:36 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /bWAPP/cmd.GPL was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/bWAPP/cmd.c HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 379
keep-alive: timeout=15, max=87
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:36 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /bWAPP/cmd.c was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/bWAPP/cmd.sh HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 380
keep-alive: timeout=15, max=89
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:36 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /bWAPP/cmd.sh was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/bWAPP/fso.aspx HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 382
keep-alive: timeout=15, max=95
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:36 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /bWAPP/fso.aspx was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/bWAPP/rhtools.mspx HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 386
keep-alive: timeout=15, max=88
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:36 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /bWAPP/rhtools.mspx was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/bWAPP/shell.aspx HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 384
keep-alive: timeout=15, max=89
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:36 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /bWAPP/shell.aspx was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/bWAPP/aspydrv.asp HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 385
keep-alive: timeout=15, max=90
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:36 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /bWAPP/aspydrv.asp was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/bWAPP/up_win32.jsp HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 386
keep-alive: timeout=15, max=88
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:36 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /bWAPP/up_win32.jsp was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/bWAPP/cmdasp.asp HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 384
keep-alive: timeout=15, max=89
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:36 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /bWAPP/cmdasp.asp was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/bWAPP/aspydrv.mspx HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 386
keep-alive: timeout=15, max=93
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:36 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /bWAPP/aspydrv.mspx was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/bWAPP/cfexec.cfm HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 384
keep-alive: timeout=15, max=94
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:36 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /bWAPP/cfexec.cfm was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/bWAPP/aspydrv.aspx HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 386
keep-alive: timeout=15, max=91
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:36 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /bWAPP/aspydrv.aspx was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/bWAPP/list.sh HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 381
keep-alive: timeout=15, max=84
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:36 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /bWAPP/list.sh was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/bWAPP/ntdaddy.asp HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 385
keep-alive: timeout=15, max=87
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:36 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /bWAPP/ntdaddy.asp was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/bWAPP/cmd.nsf HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 381
keep-alive: timeout=15, max=86
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:36 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /bWAPP/cmd.nsf was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/bWAPP/cmd.mspx HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 382
keep-alive: timeout=15, max=87
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:36 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /bWAPP/cmd.mspx was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/bWAPP/rhtools.asp HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 385
keep-alive: timeout=15, max=87
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:36 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /bWAPP/rhtools.asp was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/bWAPP/netcat.exe HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 384
keep-alive: timeout=15, max=66
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:36 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /bWAPP/netcat.exe was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/bWAPP/shell.nsf HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 383
keep-alive: timeout=15, max=88
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:36 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /bWAPP/shell.nsf was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/bWAPP/shell.show HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 384
keep-alive: timeout=15, max=88
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:36 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /bWAPP/shell.show was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/bWAPP/exploit.c HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 383
keep-alive: timeout=15, max=89
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:36 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /bWAPP/exploit.c was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/bWAPP/cmd.js HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 380
keep-alive: timeout=15, max=95
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:37 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /bWAPP/cmd.js was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/bWAPP/cmd.show HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 382
keep-alive: timeout=15, max=94
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:37 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /bWAPP/cmd.show was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/bWAPP/zehir4.aspx HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 385
keep-alive: timeout=15, max=92
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:37 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /bWAPP/zehir4.aspx was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/bWAPP/kacak.asp HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 383
keep-alive: timeout=15, max=86
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:37 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /bWAPP/kacak.asp was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/bWAPP/shell.mspx HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 384
keep-alive: timeout=15, max=90
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:37 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /bWAPP/shell.mspx was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/bWAPP/fso.mspx HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 382
keep-alive: timeout=15, max=83
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:37 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /bWAPP/fso.mspx was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/bWAPP/shell.cfm HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 383
keep-alive: timeout=15, max=87
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:37 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /bWAPP/shell.cfm was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/bWAPP/up.sh HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 379
keep-alive: timeout=15, max=65
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:37 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /bWAPP/up.sh was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/bWAPP/kacak.aspx HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 384
keep-alive: timeout=15, max=86
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:37 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /bWAPP/kacak.aspx was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/mysql_tool.php HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 382
keep-alive: timeout=15, max=85
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:37 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /mysql_tool.php was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/bWAPP/kacak.mspx HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 384
keep-alive: timeout=15, max=87
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:37 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /bWAPP/kacak.mspx was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/bWAPP/cmd.d2w HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 381
keep-alive: timeout=15, max=93
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:37 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /bWAPP/cmd.d2w was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/phpshell.php HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 380
keep-alive: timeout=15, max=94
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:37 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /phpshell.php was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/php-backdoor.php HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 384
keep-alive: timeout=15, max=88
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:37 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /php-backdoor.php was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/bWAPP/socat.exe HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 383
keep-alive: timeout=15, max=82
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:37 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /bWAPP/socat.exe was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/bWAPP/0wn3d.c HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 381
keep-alive: timeout=15, max=89
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:37 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /bWAPP/0wn3d.c was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/bWAPP/shell.d2w HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 383
keep-alive: timeout=15, max=84
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:37 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /bWAPP/shell.d2w was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/bWAPP/shell.js HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 382
keep-alive: timeout=15, max=86
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:37 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /bWAPP/shell.js was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/bWAPP/shell.py HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 382
keep-alive: timeout=15, max=64
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:37 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /bWAPP/shell.py was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/bWAPP/cmd.py HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 380
keep-alive: timeout=15, max=84
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:37 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /bWAPP/cmd.py was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/ironshell.php HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 381
keep-alive: timeout=15, max=81
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:37 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /ironshell.php was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/ctt_sh.php HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 378
keep-alive: timeout=15, max=84
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:37 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /ctt_sh.php was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/matamu.php HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 378
keep-alive: timeout=15, max=85
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:37 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /matamu.php was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/c99_PSych0.php HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 382
keep-alive: timeout=15, max=83
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:37 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /c99_PSych0.php was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/r57.php HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 375
keep-alive: timeout=15, max=87
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:37 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /r57.php was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/ru24_post_sh.php HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 384
keep-alive: timeout=15, max=86
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:37 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /ru24_post_sh.php was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/c99.php HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 375
keep-alive: timeout=15, max=86
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:37 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /c99.php was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/bWAPP/nc.exe HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 380
keep-alive: timeout=15, max=88
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:37 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /bWAPP/nc.exe was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/nstview.php HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 379
keep-alive: timeout=15, max=91
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:37 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /nstview.php was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/PHPRemoteView.php HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 385
keep-alive: timeout=15, max=92
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:37 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /PHPRemoteView.php was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/r57_Mohajer22.php HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 385
keep-alive: timeout=15, max=85
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:37 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /r57_Mohajer22.php was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/gfs_sh.php HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 378
keep-alive: timeout=15, max=93
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:37 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /gfs_sh.php was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/backupsql.php HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 381
keep-alive: timeout=15, max=97
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:37 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /backupsql.php was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/locus.php HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 377
keep-alive: timeout=15, max=98
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:37 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /locus.php was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/simple-backdoor.php HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 387
keep-alive: timeout=15, max=93
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:37 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /simple-backdoor.php was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/NCC-Shell.php HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 381
keep-alive: timeout=15, max=63
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:37 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /NCC-Shell.php was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/simple_cmd.php HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 382
keep-alive: timeout=15, max=95
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:37 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /simple_cmd.php was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/c100.php HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 376
keep-alive: timeout=15, max=83
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:37 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /c100.php was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/ekin0x.php HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 378
keep-alive: timeout=15, max=80
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:37 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /ekin0x.php was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/spybypass.php HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 381
keep-alive: timeout=15, max=83
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:37 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /spybypass.php was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/c99_w4cking.php HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 383
keep-alive: timeout=15, max=84
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:37 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /c99_w4cking.php was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/lamashell.php HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 381
keep-alive: timeout=15, max=82
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:37 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /lamashell.php was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/cybershell.php HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 382
keep-alive: timeout=15, max=85
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:37 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /cybershell.php was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/zacosmall.php HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 381
keep-alive: timeout=15, max=62
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:37 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /zacosmall.php was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/c99_madnet.php HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 382
keep-alive: timeout=15, max=84
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:37 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /c99_madnet.php was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/accept_language.php HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 387
keep-alive: timeout=15, max=82
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:37 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /accept_language.php was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/nshell.php HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 378
keep-alive: timeout=15, max=90
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:37 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /nshell.php was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/pHpINJ.php HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 378
keep-alive: timeout=15, max=87
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:37 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /pHpINJ.php was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/Private-i3lue.php HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 385
keep-alive: timeout=15, max=91
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:37 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /Private-i3lue.php was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/r57_iFX.php HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 379
keep-alive: timeout=15, max=86
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:37 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /r57_iFX.php was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/remview.php HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 379
keep-alive: timeout=15, max=92
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:37 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /remview.php was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/iMHaPFtp.php HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 380
keep-alive: timeout=15, max=92
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:37 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /iMHaPFtp.php was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/myshell.php HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 379
keep-alive: timeout=15, max=79
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:37 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /myshell.php was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/safe0ver.php HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 380
keep-alive: timeout=15, max=81
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:37 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /safe0ver.php was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/Uploader.php HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 380
keep-alive: timeout=15, max=82
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:37 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /Uploader.php was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/mysql.php HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 377
keep-alive: timeout=15, max=94
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:37 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /mysql.php was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/cmd.php HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 375
keep-alive: timeout=15, max=83
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:37 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /cmd.php was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/c100shell.php HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 381
keep-alive: timeout=15, max=84
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:37 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /c100shell.php was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/liz0zim.php HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 379
keep-alive: timeout=15, max=61
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:37 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /liz0zim.php was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/Crystal.php HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 379
keep-alive: timeout=15, max=83
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:37 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /Crystal.php was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/phpbypass.php HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 381
keep-alive: timeout=15, max=81
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:37 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /phpbypass.php was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/load_shell.php HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 382
keep-alive: timeout=15, max=84
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:37 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /load_shell.php was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/pws.php HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 375
keep-alive: timeout=15, max=78
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:37 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /pws.php was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/NetworkFileManagerPHP.php HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 393
keep-alive: timeout=15, max=86
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:37 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /NetworkFileManagerPHP.php was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/zaco.php HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 376
keep-alive: timeout=15, max=91
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:37 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /zaco.php was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/r57_kartal.php HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 382
keep-alive: timeout=15, max=82
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:37 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /r57_kartal.php was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/PHANTASMA.php HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 381
keep-alive: timeout=15, max=90
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:37 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /PHANTASMA.php was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/Dx.php HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 374
keep-alive: timeout=15, max=85
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:37 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /Dx.php was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/c99_locus7s.php HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 383
keep-alive: timeout=15, max=80
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:37 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /c99_locus7s.php was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/rootshell.php HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 381
keep-alive: timeout=15, max=81
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:37 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /rootshell.php was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/PHPJackal.php HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 381
keep-alive: timeout=15, max=89
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:37 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /PHPJackal.php was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/heykir.php HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 378
keep-alive: timeout=15, max=83
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:37 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /heykir.php was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/stresbypass.php HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 383
keep-alive: timeout=15, max=91
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:37 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /stresbypass.php was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/c99shell.php HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 380
keep-alive: timeout=15, max=60
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:37 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /c99shell.php was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/php-include-w-shell.php HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 391
keep-alive: timeout=15, max=93
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:37 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /php-include-w-shell.php was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/safemod.php HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 379
keep-alive: timeout=15, max=96
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:37 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /safemod.php was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/locus7s.php HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 379
keep-alive: timeout=15, max=80
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:37 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /locus7s.php was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/fatal.php HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 377
keep-alive: timeout=15, max=93
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:37 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /fatal.php was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/erne.php HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 376
keep-alive: timeout=15, max=77
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:37 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /erne.php was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/winshell.php HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 380
keep-alive: timeout=15, max=81
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:37 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /winshell.php was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/x.php HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 373
keep-alive: timeout=15, max=79
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:38 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /x.php was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/nst.php HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 375
keep-alive: timeout=15, max=83
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:38 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /nst.php was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/jackal.php HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 378
keep-alive: timeout=15, max=59
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:37 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /jackal.php was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/sosyete.php HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 379
keep-alive: timeout=15, max=80
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:37 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /sosyete.php was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/simattacker.php HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 383
keep-alive: timeout=15, max=84
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:38 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /simattacker.php was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/jsback.php HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 378
keep-alive: timeout=15, max=78
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:38 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /jsback.php was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/cod3rz.php HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 378
keep-alive: timeout=15, max=81
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:38 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /cod3rz.php was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/l33t.php HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 376
keep-alive: timeout=15, max=80
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:38 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /l33t.php was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/shell.cgi HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 377
keep-alive: timeout=15, max=89
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:38 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /shell.cgi was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/w3k.php HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 375
keep-alive: timeout=15, max=82
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:38 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /w3k.php was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/cmd.pl HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 374
keep-alive: timeout=15, max=88
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:38 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /cmd.pl was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/owned.php HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 377
keep-alive: timeout=15, max=85
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:38 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /owned.php was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/unreal.php HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 378
keep-alive: timeout=15, max=82
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:38 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /unreal.php was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/JspWebshell1.2.jsp HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 386
keep-alive: timeout=15, max=90
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:38 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /JspWebshell1.2.jsp was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/cmdjsp.jspx HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 379
keep-alive: timeout=15, max=58
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:38 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /cmdjsp.jspx was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/cmd.jsp HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 375
keep-alive: timeout=15, max=75
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:38 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /cmd.jsp was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/dx.php HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 374
keep-alive: timeout=15, max=77
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:38 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /dx.php was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/JspWebshell.jspx HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 384
keep-alive: timeout=15, max=80
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:38 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /JspWebshell.jspx was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/browser.jsp HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 379
keep-alive: timeout=15, max=79
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:38 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /browser.jsp was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/mysql2.php HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 378
keep-alive: timeout=15, max=78
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:38 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /mysql2.php was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/cmdServlet HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 378
keep-alive: timeout=15, max=79
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:38 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /cmdServlet was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/xx.php HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 374
keep-alive: timeout=15, max=83
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:38 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /xx.php was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/dc.php HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 374
keep-alive: timeout=15, max=81
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:38 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /dc.php was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/ListServlet HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 379
keep-alive: timeout=15, max=57
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:38 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /ListServlet was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/avent.php HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 377
keep-alive: timeout=15, max=74
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:38 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /avent.php was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/worm.php HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 376
keep-alive: timeout=15, max=76
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:38 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /worm.php was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/shell.pl HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 376
keep-alive: timeout=15, max=78
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:38 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /shell.pl was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/cod3r.php HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 377
keep-alive: timeout=15, max=78
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:38 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /cod3r.php was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/w4k.php HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 375
keep-alive: timeout=15, max=80
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:38 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /w4k.php was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/jsp-reverse.jsp HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 383
keep-alive: timeout=15, max=56
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:38 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /jsp-reverse.jsp was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/h4x.php HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 375
keep-alive: timeout=15, max=80
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:38 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /h4x.php was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/0wn3d.php HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 377
keep-alive: timeout=15, max=77
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:38 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /0wn3d.php was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/goonshell.php HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 381
keep-alive: timeout=15, max=75
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:38 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /goonshell.php was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/shell.jsp HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 377
keep-alive: timeout=15, max=55
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:38 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /shell.jsp was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/cmd_win32.jsp HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 381
keep-alive: timeout=15, max=77
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:38 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /cmd_win32.jsp was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/servlet/CmdServlet HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 386
keep-alive: timeout=15, max=77
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:38 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /servlet/CmdServlet was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/cmd.jspx HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 376
keep-alive: timeout=15, max=73
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:38 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /cmd.jspx was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/locu.php HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 376
keep-alive: timeout=15, max=79
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:38 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /locu.php was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/sql.php HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 375
keep-alive: timeout=15, max=79
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:38 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /sql.php was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/cmd.cgi HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 375
keep-alive: timeout=15, max=54
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:38 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /cmd.cgi was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/xxx.php HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 375
keep-alive: timeout=15, max=87
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:38 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /xxx.php was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/cmd.asp HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 375
keep-alive: timeout=15, max=88
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:38 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /cmd.asp was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/w4cking.php HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 379
keep-alive: timeout=15, max=82
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:38 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /w4cking.php was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/UpServlet HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 377
keep-alive: timeout=15, max=84
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:38 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /UpServlet was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/JspWebshell1.2.jspx HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 387
keep-alive: timeout=15, max=89
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:38 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /JspWebshell1.2.jspx was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/cod3rzshell.php HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 383
keep-alive: timeout=15, max=76
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:38 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /cod3rzshell.php was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/cmd-asp-5.1.asp HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 383
keep-alive: timeout=15, max=75
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:38 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /cmd-asp-5.1.asp was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/simp-worm_sys.p5.php HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 388
keep-alive: timeout=15, max=74
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:38 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /simp-worm_sys.p5.php was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/cmdjsp.jsp HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 378
keep-alive: timeout=15, max=72
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:38 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /cmdjsp.jsp was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/h4x0r.php HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 377
keep-alive: timeout=15, max=53
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:38 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /h4x0r.php was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/perlcmd.cgi HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 379
keep-alive: timeout=15, max=75
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:38 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /perlcmd.cgi was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/ntdaddy.aspx HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 380
keep-alive: timeout=15, max=78
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:38 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /ntdaddy.aspx was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/JspWebshell.jsp HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 383
keep-alive: timeout=15, max=75
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:38 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /JspWebshell.jsp was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/jsp-reverse.jspx HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 384
keep-alive: timeout=15, max=74
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:38 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /jsp-reverse.jspx was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/servlet/cmdServlet HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 386
keep-alive: timeout=15, max=73
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:38 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /servlet/cmdServlet was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/cmd_win32.jspx HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 382
keep-alive: timeout=15, max=81
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:38 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /cmd_win32.jspx was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/CmdServlet HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 378
keep-alive: timeout=15, max=78
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:38 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /CmdServlet was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/shell.asp HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 377
keep-alive: timeout=15, max=78
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:38 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /shell.asp was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/rhtools.aspx HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 380
keep-alive: timeout=15, max=86
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:38 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /rhtools.aspx was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/zehir4.mspx HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 379
keep-alive: timeout=15, max=52
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:38 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /zehir4.mspx was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/fso.asp HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 375
keep-alive: timeout=15, max=83
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:38 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /fso.asp was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/cmdasp.aspx HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 379
keep-alive: timeout=15, max=87
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:38 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /cmdasp.aspx was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/kshell.aspx HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 379
keep-alive: timeout=15, max=74
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:38 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /kshell.aspx was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/cmd.aspx HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 376
keep-alive: timeout=15, max=88
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:38 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /cmd.aspx was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/shell.jspx HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 378
keep-alive: timeout=15, max=72
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:38 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /shell.jspx was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/kshell.asp HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 378
keep-alive: timeout=15, max=77
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:38 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /kshell.asp was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/up_win32.jsp HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 380
keep-alive: timeout=15, max=74
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:38 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /up_win32.jsp was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/kshell.mspx HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 379
keep-alive: timeout=15, max=70
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:38 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /kshell.mspx was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/cmd.cfm HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 375
keep-alive: timeout=15, max=51
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:38 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /cmd.cfm was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/shell.do HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 376
keep-alive: timeout=15, max=71
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:38 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /shell.do was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/shell.GPL HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 377
keep-alive: timeout=15, max=72
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:38 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /shell.GPL was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/ntdaddy.mspx HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 380
keep-alive: timeout=15, max=73
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:38 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /ntdaddy.mspx was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/cmd.do HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 374
keep-alive: timeout=15, max=73
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:38 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /cmd.do was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/cmd.c HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 373
keep-alive: timeout=15, max=50
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:38 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /cmd.c was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/cmd.GPL HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 375
keep-alive: timeout=15, max=69
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:38 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /cmd.GPL was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/list.sh HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 375
keep-alive: timeout=15, max=76
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:38 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /list.sh was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/zehir4.asp HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 378
keep-alive: timeout=15, max=77
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:38 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /zehir4.asp was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/rhtools.mspx HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 380
keep-alive: timeout=15, max=68
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:38 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /rhtools.mspx was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/shell.aspx HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 378
keep-alive: timeout=15, max=49
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:38 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /shell.aspx was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/cmdasp.asp HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 378
keep-alive: timeout=15, max=72
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:38 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /cmdasp.asp was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/aspydrv.aspx HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 380
keep-alive: timeout=15, max=72
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:38 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /aspydrv.aspx was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/fso.aspx HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 376
keep-alive: timeout=15, max=71
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:38 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /fso.aspx was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/cmd.sh HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 374
keep-alive: timeout=15, max=70
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:38 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /cmd.sh was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/ntdaddy.asp HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 379
keep-alive: timeout=15, max=75
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:38 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /ntdaddy.asp was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/netcat.exe HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 378
keep-alive: timeout=15, max=76
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:38 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /netcat.exe was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/aspydrv.asp HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 379
keep-alive: timeout=15, max=48
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:38 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /aspydrv.asp was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/aspydrv.mspx HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 380
keep-alive: timeout=15, max=67
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:38 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /aspydrv.mspx was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/shell.nsf HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 377
keep-alive: timeout=15, max=69
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:38 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /shell.nsf was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/cfexec.cfm HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 378
keep-alive: timeout=15, max=71
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:38 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /cfexec.cfm was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/fso.mspx HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 376
keep-alive: timeout=15, max=75
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:39 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /fso.mspx was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/shell.show HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 378
keep-alive: timeout=15, max=71
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:39 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /shell.show was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/zehir4.aspx HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 379
keep-alive: timeout=15, max=86
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:39 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /zehir4.aspx was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/exploit.c HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 377
keep-alive: timeout=15, max=74
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:39 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /exploit.c was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/cmd.mspx HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 376
keep-alive: timeout=15, max=80
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:39 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /cmd.mspx was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/cmd.show HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 376
keep-alive: timeout=15, max=82
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:39 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /cmd.show was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/up.sh HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 373
keep-alive: timeout=15, max=85
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:39 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /up.sh was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/cmd.nsf HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 375
keep-alive: timeout=15, max=76
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:39 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /cmd.nsf was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/shell.mspx HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 378
keep-alive: timeout=15, max=92
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:39 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /shell.mspx was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/kacak.aspx HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 378
keep-alive: timeout=15, max=87
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:39 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /kacak.aspx was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/rhtools.asp HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 379
keep-alive: timeout=15, max=90
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:39 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /rhtools.asp was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/cmd.js HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 374
keep-alive: timeout=15, max=92
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:39 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /cmd.js was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/socat.exe HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 377
keep-alive: timeout=15, max=66
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:39 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /socat.exe was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/kacak.asp HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 377
keep-alive: timeout=15, max=68
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:39 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /kacak.asp was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/kacak.mspx HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 378
keep-alive: timeout=15, max=70
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:39 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /kacak.mspx was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/shell.cfm HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 377
keep-alive: timeout=15, max=69
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:39 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /shell.cfm was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/cmd.d2w HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 375
keep-alive: timeout=15, max=46
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:39 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /cmd.d2w was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/shell.d2w HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 377
keep-alive: timeout=15, max=70
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:39 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /shell.d2w was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/shell.js HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 376
keep-alive: timeout=15, max=65
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:39 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /shell.js was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/shell.py HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 376
keep-alive: timeout=15, max=73
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:39 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /shell.py was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/cmd.py HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 374
keep-alive: timeout=15, max=75
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:39 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /cmd.py was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/nc.exe HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 374
keep-alive: timeout=15, max=79
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:39 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /nc.exe was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/0wn3d.c HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 375
keep-alive: timeout=15, max=74
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:39 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /0wn3d.c was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/bWAPP/NetworkFileManagerPHP HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: w3af/bar
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 395
keep-alive: timeout=15, max=64
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:39 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /bWAPP/NetworkFileManagerPHP was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/bWAPP/PHANTASMA HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: w3af/bar
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 383
keep-alive: timeout=15, max=69
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:39 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /bWAPP/PHANTASMA was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/bWAPP/cmd HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: w3af/bar
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 377
keep-alive: timeout=15, max=74
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:39 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /bWAPP/cmd was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/bWAPP/JspWebshell1 HTTP/1.1
Host: 192.168.52.147
Accept-encoding: gzip, deflate
Accept: w3af/bar
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 386
keep-alive: timeout=15, max=63
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:39 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /bWAPP/JspWebshell1 was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/bWAPP/JspWebshell0.2.jsp HTTP/1.1
Host: 192.168.52.147
Referer: http://192.168.52.147/bWAPP/JspWebshell1.2.jsp
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 392
keep-alive: timeout=15, max=71
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:40 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /bWAPP/JspWebshell0.2.jsp was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/bWAPP/JspWebshell1.1.jsp HTTP/1.1
Host: 192.168.52.147
Referer: http://192.168.52.147/bWAPP/JspWebshell1.2.jsp
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 392
keep-alive: timeout=15, max=77
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:40 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /bWAPP/JspWebshell1.1.jsp was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/bWAPP/JspWebshell1.3.jsp HTTP/1.1
Host: 192.168.52.147
Referer: http://192.168.52.147/bWAPP/JspWebshell1.2.jsp
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 392
keep-alive: timeout=15, max=73
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:40 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /bWAPP/JspWebshell1.3.jsp was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/bWAPP/JspWebshell2.2.jsp HTTP/1.1
Host: 192.168.52.147
Referer: http://192.168.52.147/bWAPP/JspWebshell1.2.jsp
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 392
keep-alive: timeout=15, max=67
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:40 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /bWAPP/JspWebshell2.2.jsp was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/bWAPP/JspWebshell1.1.jspx HTTP/1.1
Host: 192.168.52.147
Referer: http://192.168.52.147/bWAPP/JspWebshell1.2.jspx
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 393
keep-alive: timeout=15, max=85
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:40 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /bWAPP/JspWebshell1.1.jspx was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/bWAPP/JspWebshell2.2.jspx HTTP/1.1
Host: 192.168.52.147
Referer: http://192.168.52.147/bWAPP/JspWebshell1.2.jspx
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 393
keep-alive: timeout=15, max=65
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:40 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /bWAPP/JspWebshell2.2.jspx was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/bWAPP/JspWebshell0.2.jspx HTTP/1.1
Host: 192.168.52.147
Referer: http://192.168.52.147/bWAPP/JspWebshell1.2.jspx
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 393
keep-alive: timeout=15, max=70
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:40 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /bWAPP/JspWebshell0.2.jspx was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/bWAPP/JspWebshell1.3.jspx HTTP/1.1
Host: 192.168.52.147
Referer: http://192.168.52.147/bWAPP/JspWebshell1.2.jspx
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 393
keep-alive: timeout=15, max=84
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:40 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /bWAPP/JspWebshell1.3.jspx was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/JspWebshell2.2.jsp HTTP/1.1
Host: 192.168.52.147
Referer: http://192.168.52.147/JspWebshell1.2.jsp
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 386
keep-alive: timeout=15, max=35
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:40 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /JspWebshell2.2.jsp was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/JspWebshell0.2.jsp HTTP/1.1
Host: 192.168.52.147
Referer: http://192.168.52.147/JspWebshell1.2.jsp
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 386
keep-alive: timeout=15, max=61
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:40 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /JspWebshell0.2.jsp was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/JspWebshell1.1.jsp HTTP/1.1
Host: 192.168.52.147
Referer: http://192.168.52.147/JspWebshell1.2.jsp
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 386
keep-alive: timeout=15, max=57
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:40 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /JspWebshell1.1.jsp was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/JspWebshell1.3.jsp HTTP/1.1
Host: 192.168.52.147
Referer: http://192.168.52.147/JspWebshell1.2.jsp
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 386
keep-alive: timeout=15, max=64
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:40 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /JspWebshell1.3.jsp was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/JspWebshell1.1.jspx HTTP/1.1
Host: 192.168.52.147
Referer: http://192.168.52.147/JspWebshell1.2.jspx
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 387
keep-alive: timeout=15, max=63
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:42 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /JspWebshell1.1.jspx was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/JspWebshell1.3.jspx HTTP/1.1
Host: 192.168.52.147
Referer: http://192.168.52.147/JspWebshell1.2.jspx
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 387
keep-alive: timeout=15, max=59
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:42 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /JspWebshell1.3.jspx was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/JspWebshell0.2.jspx HTTP/1.1
Host: 192.168.52.147
Referer: http://192.168.52.147/JspWebshell1.2.jspx
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 387
keep-alive: timeout=15, max=56
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:42 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /JspWebshell0.2.jspx was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>
GET http://192.168.52.147/JspWebshell2.2.jspx HTTP/1.1
Host: 192.168.52.147
Referer: http://192.168.52.147/JspWebshell1.2.jspx
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
HTTP/1.1 404 Not Found
content-length: 387
keep-alive: timeout=15, max=52
server: Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
connection: Keep-Alive
date: Sun, 11 Mar 2018 06:47:42 GMT
content-type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /JspWebshell2.2.jspx was not found on this server.</p>
<hr>
<address>Apache/2.2.8 (Ubuntu) DAV/2 mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g Server at 192.168.52.147 Port 80</address>
</body></html>

URLs found during application scan

Scan log

Timestamp Log level Message